08dd77726cba0d667bf1a4bb0b98e7d1_JaffaCakes118 | Triage

Sharing

General

Target

08dd77726cba0d667bf1a4bb0b98e7d1_JaffaCakes118
Size

56KB
MD5

08dd77726cba0d667bf1a4bb0b98e7d1
SHA1

a03a4bbe96139e070e3d516c82ed5547a925a160
SHA256

0420424b2c7ca1c3dba66b70c91726b9ded2eedbbc00c8b61a221f0b1b54e568
SHA512

d3468f0362af6785418d340f4f1d9e0a8ec61bee1c8bdcb3a8a062c3f43d9d34ba19fccf812bf75057a173eae916c43f75f90de901c34c3ef4a4dba4130a5ccc
SSDEEP

1536:8Fe5VTyEp+1RD7K5h5G6AyK/sXuWlbeju9:8850EpcK5nxKC3liju9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08dd77726cba0d667bf1a4bb0b98e7d1_JaffaCakes118

Files

08dd77726cba0d667bf1a4bb0b98e7d1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

eebc6cfa434a9d56873e02d08a629e06

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AddConsoleAliasA
LZOpenFileA
GetFileInformationByHandle
EnumLanguageGroupLocalesW
GetProfileIntA
GetVersionExA
GlobalSize
LocalFree
SetTapePosition
_lread
GetFileAttributesExW
IsDBCSLeadByte

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE