18882be550fc70b8d96b8c4470908b27_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18882be550fc70b8d96b8c4470908b27_JaffaCakes118
Size

56KB
MD5

18882be550fc70b8d96b8c4470908b27
SHA1

3d36832a5c851cd68a9e7a92c938b060704d7fb0
SHA256

99e7579a8abb94d5f4afbddcf2ba8d128c84b6f480c755cd5c5f647251ebe465
SHA512

974866686a851362aa1e2971a39e4b5f9bcb3561ecb20977a5382bfce8736bbbf9c728a9846a4e9595c5f3ddf84961e4214430acd3d7854fd5fc6b17ad24f091
SSDEEP

768:4eOrrrS99iNC1kKj1MuYopXP9lW1hl/GOyJwPUzuVlIvjMQP1I11PTZ6sbUWO2m:4eOrrrhUuYpa1hBGOyyDYbpP1+4sbUfZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18882be550fc70b8d96b8c4470908b27_JaffaCakes118

Files

18882be550fc70b8d96b8c4470908b27_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9f1a1d47560715ccacf7ded1d6ece1a3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHandleCount
SetThreadAffinityMask
NlsResetProcessLocale
QueryDosDeviceA
ReleaseSemaphore
CheckRemoteDebuggerPresent
GlobalHandle
Heap32Next
IsBadStringPtrA
InitializeCriticalSectionAndSpinCount

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE