1af22826c29391d60fd299b5e3fdd62e_JaffaCakes118 | Triage

Sharing

General

Target

1af22826c29391d60fd299b5e3fdd62e_JaffaCakes118
Size

63KB
MD5

1af22826c29391d60fd299b5e3fdd62e
SHA1

781efb6871102c14f5a7e27708b9a3a2fc1edf89
SHA256

14f8d54c226058238a22e5f00694b0d2b1dae8051b5c94160bcbd0fac492f308
SHA512

b65689068f5bfeb1bb46ed6d884fb91e8b0b4f34cc741923ceba99fceb5c41eb22d31e9d8187e53d86f05d76c950213edb8573e95e42c9b806932787a0fe82e4
SSDEEP

1536:hkSVeTOzvVn0EatSxG2VrAdzbVyZZYbLPqbdpLEWF:hkSmOzQSxGWaPVgZYPuLFF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1af22826c29391d60fd299b5e3fdd62e_JaffaCakes118

Files

1af22826c29391d60fd299b5e3fdd62e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

70bf06eb7afcef597144b99036285d18

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeEnvironmentStringsA
InterlockedDecrement
FreeEnvironmentStringsA
SetConsoleIcon
SleepEx
CloseHandle
TerminateJobObject
FindAtomW
LockResource
WritePrivateProfileStructA
SetDllDirectoryA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE