19fafdff9e550ff958af06e578bff4ab_JaffaCakes118 | Triage

Sharing

General

Target

19fafdff9e550ff958af06e578bff4ab_JaffaCakes118
Size

56KB
MD5

19fafdff9e550ff958af06e578bff4ab
SHA1

bcd68d044aca07fcd3e2adc29b2945a511a106ac
SHA256

52dae99fd29c28115a1cb14fb9fd5ad94ec4319ea967a32bc2ffe2662cce4bc9
SHA512

de91f1b468e120f1dd37036fcf7996debc227db7e08add95f71a0c7a0bd6a0c0aff88191446dbfbab6487ef75dbf0d4c27239708e839a99908a43c145eac7c0f
SSDEEP

1536:m8vX56SxKQ5mr+82Hd2w2iY7DABcoG+PD7vTzGdqpO5gz:m8/ASEQUa82IH7DkX/PGEo5gz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19fafdff9e550ff958af06e578bff4ab_JaffaCakes118

Files

19fafdff9e550ff958af06e578bff4ab_JaffaCakes118
.exe windows:4 windows x86 arch:x86

53b2c394fe2d6c587a8e84bccbcfaac8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueueUserWorkItem
InitAtomTable
GetSystemWow64DirectoryA
HeapQueryTagW
GlobalGetAtomNameA
Module32FirstW
GetConsoleAliasExesLengthA
GetStringTypeExA
GetNextVDMCommand
CreateWaitableTimerA
WriteProfileSectionW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE