1b9e345245189b8555b4c1c759664c61_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b9e345245189b8555b4c1c759664c61_JaffaCakes118
Size

25KB
MD5

1b9e345245189b8555b4c1c759664c61
SHA1

92da3c9169014863b5b50191a1def8e1175fac24
SHA256

06d142cd60e08ec045adcc712ae09dde279ce345708e646b9590552bffe1b1a1
SHA512

5c6858f870e38375a7a1e713f883950cfe50226ae625bb4d29cde08672b46e44653cf698dbf672fd35210a99492b32e70a1132820d4dfed0186df36746c0d497
SSDEEP

768:FKNKYtVHGL/qQmGIkPiX77K4CcUbeLASc3r:GtVHGL/qLGIkEKjBSkr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b9e345245189b8555b4c1c759664c61_JaffaCakes118

Files

1b9e345245189b8555b4c1c759664c61_JaffaCakes118
.exe windows:5 windows x86 arch:x86

eb3ccd570f159a63240a0f5d90c0fd3b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

PrepareTape
GlobalDeleteAtom
UnregisterWaitEx
GetVolumeNameForVolumeMountPointA
LZSeek
VirtualAllocEx
DebugBreak
GetFileAttributesA
GlobalFlags
SetVolumeMountPointA
ExitProcess
lstrlenA
HeapAlloc
OpenEventA

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ