18826567284c1302de92f9a84f81c13c_JaffaCakes118 | Triage

Sharing

General

Target

18826567284c1302de92f9a84f81c13c_JaffaCakes118
Size

56KB
MD5

18826567284c1302de92f9a84f81c13c
SHA1

a659439cf9a62fce713814a3d858ddd1ba56eef2
SHA256

99eab46a5845588120d438f04ef084b3325f2d03cf593e655ed480aa5c27049b
SHA512

3de7806f959adf8376737805eecb2519d857d226afbbf72396a9839329c1c45a3988219a53bf9edfc9d02bf845567eef19af8172962cf3e4397c63543bf44177
SSDEEP

1536:JeO111127mY0daXq5zLM9w1s84K19tLmm/tuW8zzb7r/:JeO111127mVEUzLw8Xt2WY/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18826567284c1302de92f9a84f81c13c_JaffaCakes118

Files

18826567284c1302de92f9a84f81c13c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8f329a08db9a46e6fdead13e2718fd1c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

_lcreat
GetLocalTime
CreateMutexW
BindIoCompletionCallback
GetStdHandle
Toolhelp32ReadProcessMemory
GetDiskFreeSpaceExW
GetModuleFileNameA
RtlFillMemory
GlobalFindAtomW
BuildCommDCBAndTimeoutsA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE