35a700d42f514e69c8b9dbf38440d64b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

35a700d42f514e69c8b9dbf38440d64b_JaffaCakes118
Size

56KB
MD5

35a700d42f514e69c8b9dbf38440d64b
SHA1

20ea85ce5629f4a5fdd9dfcba47c2e53ef6a66c0
SHA256

0070dc36ef3aa3a8814e6b8466408932b31030152e2c98ef7e61bfca03af02d3
SHA512

ea792457e7ca6d8b436c01020725e954e72220dfd21c481fa755dc2e92c51cecde80e50a43b6b136d46b84dfb428b24bd35ea8d7704adc7adfa96be4a1c11bfd
SSDEEP

1536:ogBJk/QSA1ukHiXzimDImYKZUpyj6eO6rjDxj3G:RnH5uywFDBYnpyOexnV6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35a700d42f514e69c8b9dbf38440d64b_JaffaCakes118

Files

35a700d42f514e69c8b9dbf38440d64b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

20cd3576c06addbbda1ae6d0c8971ec2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFiber
AddConsoleAliasW
HeapReAlloc
CopyFileA
DelayLoadFailureHook
EnumSystemLocalesA
EnumDateFormatsExW
GetVersion
CloseProfileUserMapping
lstrcmpi
GetProcessHeaps
lstrcmpW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE