3150c3242c69380b54f219a44d626fd2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3150c3242c69380b54f219a44d626fd2_JaffaCakes118
Size

83KB
MD5

3150c3242c69380b54f219a44d626fd2
SHA1

854a7465a7431eee5f392a6a9acfdc52d8159c49
SHA256

a25956d10c94ff88cda159a7b04978088e2d0e70f1635483e6c6ad19c84f105e
SHA512

fb979c4feec0884516cae7e062ac3c7c03403e9e93408bd9e28140845b382f3aa063409b3b7e3dc6dbf470e2d67c422f1c7f0c69bf478b1ee02bbf683155c675
SSDEEP

1536:rAtGQdykRMTAVthbsZRXZPMDKWaBIUSgjMsqb69pjVrs2ryrd1vUQuqwcizSkX:rodLiTAVTYXpBIxgve69Hs2quciu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3150c3242c69380b54f219a44d626fd2_JaffaCakes118

Files

3150c3242c69380b54f219a44d626fd2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

450e348c3486c2eb903274cffba79b38

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalMemoryStatusEx
SetTimerQueueTimer
FreeLibraryAndExitThread
GetTempPathA
WritePrivateProfileStringW
GetNumaAvailableMemoryNode
GetConsoleAliasW
SetVDMCurrentDirectories
GetConsoleWindow
lstrcpyA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE