f8f56b6de2c8f519b6e120bc580a89af_JaffaCakes118 | Triage

Sharing

General

Target

f8f56b6de2c8f519b6e120bc580a89af_JaffaCakes118
Size

63KB
MD5

f8f56b6de2c8f519b6e120bc580a89af
SHA1

aab411ef17a36b12d97c58b38080705e90e70302
SHA256

05b309f76d5e058230f99167e1086cea3d2ec1bc9f71b3a3a8cc5400d51ff554
SHA512

775c88e29644f5b84ea53e3b85eba0282f6c14f94835fba8d93b35646c059db6a64df6a342dd6a67e615d1de755abfd9ab825538c487817651ef94cf288a6799
SSDEEP

1536:fezb6MlviOiQiRPbmE3jtU5cMHkPw9bq7TG7Jx1FndvU/:2zHK7QiJmE3jtWcMEPwRca7JdK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f8f56b6de2c8f519b6e120bc580a89af_JaffaCakes118

Files

f8f56b6de2c8f519b6e120bc580a89af_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dce226b31ca3878f6f9b219dc0374887

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetThreadExecutionState
HeapAlloc
Heap32First
GetStdHandle
CreateRemoteThread
DefineDosDeviceA
CopyFileExW
LockResource
VerLanguageNameW
GetStringTypeExA
WriteProfileStringW
RtlZeroMemory

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE