417b780c0f2a27eb0f97de92264f2c1e_JaffaCakes118 | Triage

Sharing

General

Target

417b780c0f2a27eb0f97de92264f2c1e_JaffaCakes118
Size

83KB
MD5

417b780c0f2a27eb0f97de92264f2c1e
SHA1

06dc7703c62db6508b9d7fdf22af3261733b966c
SHA256

9517ee946060dc674932858416a34b6b307bb5a239ea3c48b29980d9007555dd
SHA512

cf9d36a5afa955fc2728ed950ae6c2395c057c03f51ce140998778e8fcef20b29b7446ec7fb061d9b78e9961db5b43fe786126e931147068070d8c846123f486
SSDEEP

1536:pVnwxrTUUE2OQgTLmoSQEpaD+kghxf87kxdyrzMKEpjVrs2ryrd1vUQuq3L/:XGDOQgTBS5OYxf87kxdyrzMKEHs2qVD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
417b780c0f2a27eb0f97de92264f2c1e_JaffaCakes118

Files

417b780c0f2a27eb0f97de92264f2c1e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd1819396dc545c071c81871fa7b15e6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetCommBreak
OpenEventW
GetStringTypeA
GetPrivateProfileStringW
MapViewOfFileEx
CreateFileA
GetStringTypeExA
UpdateResourceA
CreateHardLinkW
VirtualProtect
CreateFileMappingW
SetTapePosition

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE