1026be64686da828a69ee52f124b1870_JaffaCakes118 | Triage

Sharing

General

Target

1026be64686da828a69ee52f124b1870_JaffaCakes118
Size

56KB
MD5

1026be64686da828a69ee52f124b1870
SHA1

2ade089bdc809e3507a14aafd8862b1cb104f0e4
SHA256

b16bb9a362ccbbe3c7c0d4e328aa523ea98c4ac518d05d937569d9f732a372a1
SHA512

2e42a6fb9ee5b3028908a24315eb85325eadb0bb2d356c66f18b9597768c50a3d46890eb461c7a3dfc2d80182025ac746f4387d1815221aaa5e400bc34fa3d9d
SSDEEP

1536:DgGx74ndYARI8Ob4sqVRoiZM4GRwkSWFr7O:iHS8umBCvSWF2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1026be64686da828a69ee52f124b1870_JaffaCakes118

Files

1026be64686da828a69ee52f124b1870_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9d00fd9e4b75f7cb4b46529ba42efc35

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAddAtomA
CallNamedPipeW
CreateMutexW
RtlCaptureStackBackTrace
GetFileAttributesExW
SuspendThread
GlobalGetAtomNameW
MoveFileWithProgressA
EnterCriticalSection
CreateTimerQueueTimer
lstrcmp

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE