f0a45a5094be1868f51679c26dce30b2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f0a45a5094be1868f51679c26dce30b2_JaffaCakes118
Size

56KB
MD5

f0a45a5094be1868f51679c26dce30b2
SHA1

5a29354f53804aa7ca4b83a11d64f4c56d977bfa
SHA256

5aa7a03525d9e63a0bfb1256c41195a2dcaecc8ca5ba8b1e835b013399fb9318
SHA512

fed2e109973d099fc1cc853929f09f02ee34fd9807a017ab09394e17c05d880dd1955dbd5d76863e6346a121ef492692e840c740f7137f0150edeeed8c29f571
SSDEEP

1536:+0RLNpLsEe+BH6/O/VPA4vG1euUfwDEymrD4YxS:drLzSm/CC+E8YxS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0a45a5094be1868f51679c26dce30b2_JaffaCakes118

Files

f0a45a5094be1868f51679c26dce30b2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0b66f2063ceaa14107b9693ba8bc6e03

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentStringsW
LeaveCriticalSection
GetEnvironmentVariableA
TrimVirtualBuffer
GetCurrentDirectoryA
SetLocalPrimaryComputerNameW
Heap32First
GetNumaProcessorMap
VerifyConsoleIoHandle
SetFileShortNameW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE