3d0a3eb4a802d2f7ac37a2e490630fe8_JaffaCakes118 | Triage

Sharing

General

Target

3d0a3eb4a802d2f7ac37a2e490630fe8_JaffaCakes118
Size

87KB
MD5

3d0a3eb4a802d2f7ac37a2e490630fe8
SHA1

af848bfe29339288577be49f860abf4c3c0e897f
SHA256

8e32525c305617cd46ba725e616f2eadc6e0c0ffeff4fb6d0454b98831b17eb2
SHA512

3e5870837b837bbe7ee45c1461fcc4080833ab39e9085fbc5501b036037465b678460a5b68e12c5dd43ac820288d231dd517b65fa965ab9f5cf7261e3eaad259
SSDEEP

1536:mC6lE0dEHAaz19LdgTb5j3BK6Eayqq3eY65LajEErxTWDTMqhGKYIZTET8FVxdJC:mC6GVzne3Bsq0KFajBkMqhGKZTbzxdo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d0a3eb4a802d2f7ac37a2e490630fe8_JaffaCakes118

Files

3d0a3eb4a802d2f7ac37a2e490630fe8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f10a17d1f04ac6c49a6dcc71a4b620fe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RequestDeviceWakeup
CloseHandle
FindFirstChangeNotificationA
OpenJobObjectW
GetProcessPriorityBoost
GetDefaultSortkeySize
GetConsoleHardwareState
OpenFileMappingW
CreateDirectoryA
CancelTimerQueueTimer

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 31KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE