f9e857aa4e03df9613e88bc94ffc5f27_JaffaCakes118 | Triage

Sharing

General

Target

f9e857aa4e03df9613e88bc94ffc5f27_JaffaCakes118
Size

83KB
MD5

f9e857aa4e03df9613e88bc94ffc5f27
SHA1

1aa834ee4beaf9c439a2b700ed8a2d9ccc5a4810
SHA256

ddc87e40936b7494a69fc96aa69df0f9bffba35349d85d1f1b8e768ccbca73bc
SHA512

895ea3405a9e71c19e7d27711f677e9a6ec2f1ffb75f1409d3eac40df91655cb98ff238ea72152bb15f44fdeb4982b4487fd74cc170710de06eec7a6c3087492
SSDEEP

1536:JwTwTwTwT7E3Mcg40D8Wel/eLk6zMhyWo+ctIDeDhKTfh4ArOjEErxTWDTMqhGK6:JwTwTwTwT7E8D6/eVghOpxDhA54ArOjn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9e857aa4e03df9613e88bc94ffc5f27_JaffaCakes118

Files

f9e857aa4e03df9613e88bc94ffc5f27_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2777b5db72ae6420d40b3977a6746ca4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
SetClientTimeZoneInformation
ReadFileScatter
EnumSystemCodePagesA
FatalAppExitA
CompareStringA
VirtualLock
VerLanguageNameA
CreateHardLinkA
WriteConsoleInputW
SetCriticalSectionSpinCount

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE