23303d2d38bd3f59a4bd3875fbd2c910_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

23303d2d38bd3f59a4bd3875fbd2c910_JaffaCakes118
Size

94KB
MD5

23303d2d38bd3f59a4bd3875fbd2c910
SHA1

f8c996d7d62498e7696090f9a6d3a77c6c0cc697
SHA256

ef46a46e989dc1972adc24e84ef177ba12e3c95cdf7b2ac957bfdd0f54dfd6c4
SHA512

cb874e970981518cf0325590a2d6a03cc05fdd6b8de7f8b9a2e0e357c29d8a496a5d705153a1ec014bcb92451b02ef74c2d03fe85b84b8e6650d81c14c1e7155
SSDEEP

1536:QxZ/o83V5SSC+70UKVCLNWJ55c8YaEJwZK4/83ZoMOALLbwTc:4/ocV5A+0XuWdhZEXtpxLLbCc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23303d2d38bd3f59a4bd3875fbd2c910_JaffaCakes118

Files

23303d2d38bd3f59a4bd3875fbd2c910_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0f00bed4668b09b7d4fdd4a8f3301c8b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InitializeCriticalSection
SetFileApisToANSI
QueryDosDeviceA
SetConsoleOS2OemFormat
RemoveDirectoryW
GetDateFormatA
ReleaseSemaphore
CreateThread
AllocateUserPhysicalPages
BaseInitAppcompatCacheSupport

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.krdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE