3a766537579983815860000a6192ae8b_JaffaCakes118 | Triage

Sharing

General

Target

3a766537579983815860000a6192ae8b_JaffaCakes118
Size

17KB
MD5

3a766537579983815860000a6192ae8b
SHA1

dbedee94729ee697e7a0867d28442ee0997c8854
SHA256

2f5ee9976d43457242f3bee86b03b29a303aa52f7525ee7e8c8d31bc3f73a956
SHA512

f449679da5ef5a98279a10b7dfa9cd4b3e83e6e31f5c58d06a08cac29bb3c9c44d6fd3e5d7452e0a93eac680a6427a9ee4785977c202b5f6ce8a39bf7c7f136a
SSDEEP

384:g7AgtqXvXaENfCmwdYP4+Ypr0jnE6dnilIt0wAXXWyamOAHJB:gkgtqX/N6mwOPRYCjE6Bili8XW0Nv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a766537579983815860000a6192ae8b_JaffaCakes118

Files

3a766537579983815860000a6192ae8b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

43d76f7d496acb179473650d29cb6bee

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoW
SetPriorityClass
SetConsoleOS2OemFormat
GetACP
GetNumaProcessorMap
lstrcmpW
LoadLibraryA
GenerateConsoleCtrlEvent
GetThreadTimes
BaseDumpAppcompatCache
GetModuleFileNameW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE