429889ff9a1151fa0686f81bd6ea1b9e_JaffaCakes118 | Triage

Sharing

General

Target

429889ff9a1151fa0686f81bd6ea1b9e_JaffaCakes118
Size

40KB
MD5

429889ff9a1151fa0686f81bd6ea1b9e
SHA1

02cc4840fd5c20a1287a4008ed704dbcf1e53c53
SHA256

509b60e0d15de40a4f8d66a747f2c354b5f0fa05daf1fcfd82b5674f00e3a96c
SHA512

ae2a9b496b273fcd6c0abed2674e206e6808de928c021754410edcfa45daf5b4d1c3ab101b659eff7521e547bfc7c29cd5f67dea246e6a22b2e7f4cc199d29d1
SSDEEP

768:B5H8ZUTUCsOVhvoFc5Vp6SJ1rA3eWnsWg8X1z7:B5NNpTNvAuc88X1z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
429889ff9a1151fa0686f81bd6ea1b9e_JaffaCakes118

Files

429889ff9a1151fa0686f81bd6ea1b9e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

db5368f16fc036edb0ea87f29001684a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memcpy
memcmp
_umask
??2@YAPAXI@Z
_spawnl
_stat64

kernel32

GetSystemInfo
GetVersion
GlobalAlloc
GetNextVDMCommand
GetDriveTypeA
GetStdHandle

Sections

.text
Size: 13KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE