473f9f5921ba1d929f4ecac621c616d5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

473f9f5921ba1d929f4ecac621c616d5_JaffaCakes118
Size

56KB
MD5

473f9f5921ba1d929f4ecac621c616d5
SHA1

591d8210d44792e5bab92000b1375be18db9e770
SHA256

da80b2685e6c9b6f21978541bc274f88e1cc7e1a3a7df749924e3f95732ea6c6
SHA512

3721d425ba78365d03177c48cb6492208ec708b7ad4826d4c310632a585fe4a9178a94bdf6cdce082afa9533b3be69a9f307eb2adfc5d04035b2ce522190b03c
SSDEEP

1536:KddddgxtbqC3m9j5OefbGW2qiow+CL8e8aFGLYmmx:KddddgxtbqC3m9j5OefbG+aoZpkmS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
473f9f5921ba1d929f4ecac621c616d5_JaffaCakes118

Files

473f9f5921ba1d929f4ecac621c616d5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9953bec52bd888fa42abd8248c0c3f26

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BaseCleanupAppcompatCache
DebugSetProcessKillOnExit
FindResourceExA
WaitForMultipleObjects
CopyFileExA
CheckRemoteDebuggerPresent
lstrcpy
SetFilePointerEx
GlobalFlags
GlobalMemoryStatus
GetProcessHeap

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE