321e5b3e06b861a64bc4a552e11063a1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

321e5b3e06b861a64bc4a552e11063a1_JaffaCakes118
Size

63KB
MD5

321e5b3e06b861a64bc4a552e11063a1
SHA1

9876618243687bde12329aff94deb7ae214e8c5d
SHA256

9291245a72fd6c65200005d19f7e2b1ace4474b15c027567205e4c0d9c1bfbfc
SHA512

54ee8809ae015e768cfbad38a3a0eddfe15b9549b560ef17dae0d1c28bfcd6c87d419cb160a8cb1d939d778cc70f0032bf3de476ebe50e96164d536d7a8fcef3
SSDEEP

1536:ueIJUjBFKHxZUHXBb0HhaYSXfzNx8R1TVwCgCFQDn:dhB0UHgO/8R1TVxYn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
321e5b3e06b861a64bc4a552e11063a1_JaffaCakes118

Files

321e5b3e06b861a64bc4a552e11063a1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bfb37199d9f5859f854c43b70acc15d0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateTapePartition
CreateJobObjectW
HeapExtend
UTRegister
GetProcessHeaps
WriteFileGather
OpenDataFile
SetTimeZoneInformation
IsDBCSLeadByte
WaitNamedPipeW
GetTapeParameters
IsBadReadPtr

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE