02729f8212b645d7b60e9f2543926ae5_JaffaCakes118 | Triage

Sharing

General

Target

02729f8212b645d7b60e9f2543926ae5_JaffaCakes118
Size

24KB
MD5

02729f8212b645d7b60e9f2543926ae5
SHA1

29bc529e4823cb21460ddd10973db5994182b11e
SHA256

f68c4b2f942abe1d708ad4e34508992854d6f66df82356b8fe59ffaddfd0d362
SHA512

45da26099f4153f2c31dc6978d104665abddac484c361b3da38148b4da8582b3f4bc5574524ca1b0aafa885e673e30e0f442560d02d389c72b7559cdcd8307c4
SSDEEP

768:laHN6e4X4jqvWyUTnAewFpAFotrxMGqqUfq2/LSfW4AMb:laFyUkWWqo6qUygOfW4b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02729f8212b645d7b60e9f2543926ae5_JaffaCakes118

Files

02729f8212b645d7b60e9f2543926ae5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

41f4c6c9432364c82ec4c7599e530e0d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FatalExit
CloseConsoleHandle
HeapLock
HeapDestroy
AssignProcessToJobObject
ExpandEnvironmentStringsA
MoveFileWithProgressA
WaitForMultipleObjects
LocalSize
GetPrivateProfileSectionA
LZCopy

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE