081180b110b1c27a16029b3ab8a7f060_JaffaCakes118 | Triage

Sharing

General

Target

081180b110b1c27a16029b3ab8a7f060_JaffaCakes118
Size

83KB
MD5

081180b110b1c27a16029b3ab8a7f060
SHA1

3bfa05ad0e5f45bebf4ac8c5743a7de14483ea0d
SHA256

9cbc357fd8b8ec54212e56e8228bc8c7e0f4f7a7b2b1ef0bc2945e5e70d25975
SHA512

7921dea419ab0727811a8fa9a56122fb2c4ecd4bcabc42acf22daaf7b24b2d8b99c95daf0427f8ef52bb0786289188d503ba6d821938edc26c0a45f1d705da94
SSDEEP

1536:HkWHLm37ns7jtmt0jC1QNyH2aRCIvQZpjVrs2ryrd1vUQuqUfsy:EGm3Ls3oajCUyHzcHs2qV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
081180b110b1c27a16029b3ab8a7f060_JaffaCakes118

Files

081180b110b1c27a16029b3ab8a7f060_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c43e73ab9039c59ac6c520bd9c05ebb6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DebugBreak
GetLargestConsoleWindowSize
SetConsoleInputExeNameW
CreateProcessInternalW
SleepEx
GetWriteWatch
BaseCheckAppcompatCache
GetDiskFreeSpaceExA
HeapQueryTagW
GetVersionExW
FindActCtxSectionGuid

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 27KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE