1a1367a771d22e309e6608ff3432ac17_JaffaCakes118 | Triage

Sharing

General

Target

1a1367a771d22e309e6608ff3432ac17_JaffaCakes118
Size

83KB
MD5

1a1367a771d22e309e6608ff3432ac17
SHA1

ac13882c806b71cef8559dfaef03329632f01175
SHA256

2ae3993a887394cff0f2e49d873d3efa2343ec165dd399c1795510466083ecdb
SHA512

69b18f368ca976fb7a5323bd8d4fef961a786cab5f6a726e6aa8f559450ff5e75b4aa30817cf731629509ce84814dd52817bf302ce61aa2d54ea8a6dcf6200c9
SSDEEP

1536:y/8Hba6aeo/d9XaDX55NW7fPWzrhoVEGaMNvjEErxTWDTMqhGKYIZTET8s0C98:Wp6aeo/dqXPNW7iriELYvjBkMqhGKZTX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a1367a771d22e309e6608ff3432ac17_JaffaCakes118

Files

1a1367a771d22e309e6608ff3432ac17_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9a61abcce2f11d59690aaeac79272c86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetHandleInformation
HeapCompact
SetConsoleMode
SetLocalTime
SwitchToFiber
SetConsoleInputExeNameA
GetThreadLocale
GetProcessWorkingSetSize
lstrcmpW
InvalidateConsoleDIBits
RemoveLocalAlternateComputerNameA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE