3d323fb0f60f2bb12c185f04ab0c18b9_JaffaCakes118 | Triage

Sharing

General

Target

3d323fb0f60f2bb12c185f04ab0c18b9_JaffaCakes118
Size

83KB
MD5

3d323fb0f60f2bb12c185f04ab0c18b9
SHA1

8a722867d76a1cea4c0871749dbf4bd65486fa69
SHA256

27da940230575924c5e53f6023fb674a650d16606176b0cfdaa4d3b5e82b9872
SHA512

c553816c58e7e2d32d19e4379703b226b26d673d43a40176714521cba097191cd4fbb02dc520aa9590edfa2b01ec9bf267c7fc21793fd9c82432e414284d9810
SSDEEP

1536:KEEEEfYdYzlByb7VN4V6a+uIbzmwNnLGyZYZTpjVrs2ryrd1vUQuq3L/:AYdYzlBybpN4VX+uwxLB2Hs2qVD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d323fb0f60f2bb12c185f04ab0c18b9_JaffaCakes118

Files

3d323fb0f60f2bb12c185f04ab0c18b9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0cbfbd12f9db94ad23727d05e19ddae6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ConvertThreadToFiber
IsBadWritePtr
FreeLibraryAndExitThread
LockFileEx
MapUserPhysicalPagesScatter
QueryPerformanceFrequency
GetHandleContext
FindVolumeMountPointClose
EnumResourceNamesW
GetStartupInfoW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE