32212504dbe27902f628c9ef809c104f_JaffaCakes118 | Triage

Sharing

General

Target

32212504dbe27902f628c9ef809c104f_JaffaCakes118
Size

56KB
MD5

32212504dbe27902f628c9ef809c104f
SHA1

e60e08981a718208cd5c238089015310209128db
SHA256

0ff08817b2ea349f3b999ae7bbd1e7088261094d6ad56fca8d6d9381598451f0
SHA512

98be0639309f866a7190aa36e02f85b1d1258345de69639a723bead07471c153c547bca8fa5ec63fb24c0588afc0f4620f029eec826b4fcdf7e824e02a11add0
SSDEEP

1536:1vbGwMUL/IMbd+K+1F5FMRt8iLbiD3s73JxMKrgFUax:Fl6K+K+1FMmif5xxrgFnx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
32212504dbe27902f628c9ef809c104f_JaffaCakes118

Files

32212504dbe27902f628c9ef809c104f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e34ce86892a6f44bc3be3f16a235a6af

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempFileNameW
DisableThreadLibraryCalls
FindNextFileA
GetThreadPriority
LoadResource
GetThreadPriorityBoost
SetDefaultCommConfigA
GetConsoleCP
OpenSemaphoreA
DebugBreak
SetComputerNameExA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE