f462ca3752da48a752d1faaad4cdf8f9_JaffaCakes118 | Triage

Sharing

General

Target

f462ca3752da48a752d1faaad4cdf8f9_JaffaCakes118
Size

76KB
MD5

f462ca3752da48a752d1faaad4cdf8f9
SHA1

cf3e84965d9ce340a3cfcd906da5aba234a037ec
SHA256

13e47c71f37af4adbe6f8c89944a5fce9ed6e04113cdaecb3c5b98ee32ecd181
SHA512

0462aa51b4c781386b19b50ae32dc9622495f7f378ae4f0fb77691ad170458d859eb2154e52c238b0bf4971fae14f9ec96223e6732137ce3336de2005a741a77
SSDEEP

1536:vOPgyYe/Yhsul+TnbkdN7J/Q2JrcoXLib8oW1aOOpjVrs2ryrd1vUQuq6:vtVewHl+Tb2N7J/2WtL1aOOHs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f462ca3752da48a752d1faaad4cdf8f9_JaffaCakes118

Files

f462ca3752da48a752d1faaad4cdf8f9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d2ca3616cce91a192edc981924efe8f5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsDebuggerPresent
GetFullPathNameW
SetSystemTimeAdjustment
GetPrivateProfileStructW
WaitForSingleObject
SetProcessPriorityBoost
EnumResourceTypesA
SetCurrentDirectoryA
SetInformationJobObject
ReleaseSemaphore

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE