81abd27a4ff22e961e171fef91496e47_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

81abd27a4ff22e961e171fef91496e47_JaffaCakes118
Size

815KB
MD5

81abd27a4ff22e961e171fef91496e47
SHA1

b62a9321b9c6b310799ef60658446945b07a165f
SHA256

603aa01963699ede0ae7f4f012ce77771708871d6ef38d5a54366e4a597d5291
SHA512

ac1b60d31efdd3b227684a26c2bbe225efdbf4948ab31819d5c98e7dbb805ae99b14e2b6b3c5cec0f7de515caf3270ded40f5a9362ff4d6fce04516e7e9b1c75
SSDEEP

24576:PpmPz9QthUvy4XnPkB6pvjrcd18Bujth:Qzet+qQk2UdOMn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
81abd27a4ff22e961e171fef91496e47_JaffaCakes118

Files

81abd27a4ff22e961e171fef91496e47_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9a7d10f620c09a20e7286ab809d56841

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileW
FindResourceA
GetConsoleCP
HeapCreate
GetFileType
GetStringTypeA
GetProcessHeap
GetComputerNameW
GetCurrentProcess
GetFullPathNameA
GetModuleHandleA
GetDiskFreeSpaceA
GetPrivateProfileIntW
LeaveCriticalSection
lstrcpyW
WriteConsoleA
SetEnvironmentVariableA
SetCurrentDirectoryA
EnterCriticalSection

azroles

AzApplicationCreate
AzApplicationClose
AzApplicationDelete
AzAddPropertyItem

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mdata
Size: 803KB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ