f211ed9c186ca7bde34271f84601aaad_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f211ed9c186ca7bde34271f84601aaad_JaffaCakes118
Size

83KB
MD5

f211ed9c186ca7bde34271f84601aaad
SHA1

c94b801a29d717eeec10f39c9509be904c46e173
SHA256

e2f930e1e9b5237d3f2e69fbf8611d417d339b82db552e3925673b1028e3015d
SHA512

49a955a0261eda766c696452dcaf00c5cb1335fb0513cf93f84cfa1a9d7588acf92fc87eeb381ab9e8aa6aa98125e441be401e22305a8414c587622af027bb79
SSDEEP

1536:J6owvLU6TI5FnOk8/hhaeJaDkQ6sGkor9jEErxTWDTMqhGKYIZTET8bDQ:JCIkI5FnODZ38kQ7QjBkMqhGKZTbbc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f211ed9c186ca7bde34271f84601aaad_JaffaCakes118

Files

f211ed9c186ca7bde34271f84601aaad_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0252fced7bd1fc10d3d04268869d48a6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleIcon
DefineDosDeviceA
OpenThread
SetEnvironmentVariableA
SetComputerNameExW
SetCriticalSectionSpinCount
FlushConsoleInputBuffer
GetNamedPipeHandleStateW
SearchPathA
CreateToolhelp32Snapshot

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE