087aaecdc38ddf55456c650371127a6a_JaffaCakes118 | Triage

Sharing

General

Target

087aaecdc38ddf55456c650371127a6a_JaffaCakes118
Size

76KB
MD5

087aaecdc38ddf55456c650371127a6a
SHA1

15d628ed621214e184daacbc2c1176ac9bc40b90
SHA256

71053aa82097c926d41e6e22f95e462d9704bc511e65fc1b13bbfd65e012caa2
SHA512

3cc193139339e4b544dfb70ffc038321aabe674f1bec82a6f6391b292e049b3b48eaca5bc9001213ac77881e232aa9605aa336503e9f55daa89dea99d7f97ea7
SSDEEP

1536:PGIXaWDZYHbvZJ4Dvp9UbiXoCkn0S8DeP8pABlT9A4iX1pjVrs2ryrd1vUQuq6:baWaH1J47nzXpJSalpOhqX1Hs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
087aaecdc38ddf55456c650371127a6a_JaffaCakes118

Files

087aaecdc38ddf55456c650371127a6a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b14322af78c4684a357d549f730001c5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommTimeouts
GlobalSize
FreeLibrary
GetNumaAvailableMemoryNode
SetUnhandledExceptionFilter
Toolhelp32ReadProcessMemory
GetThreadPriorityBoost
lstrcat
SwitchToThread
AllocateUserPhysicalPages

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE