4469a07ec5ea5ab3c8b2ee364956df6d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4469a07ec5ea5ab3c8b2ee364956df6d_JaffaCakes118
Size

63KB
MD5

4469a07ec5ea5ab3c8b2ee364956df6d
SHA1

a0f8b842d4859aa300d2f7d5dded70a02713201a
SHA256

0a82e9cd9476d24f50a91034e48b349c1a0bfffd11ceab6896b6692e83bf4074
SHA512

2f0658c05027d43834829d7356510d5c048c450726bc323787f77da7adb2431821fbd6b4a883443df954f684a8a449a9520985100c501568e618b387a8173159
SSDEEP

768:uXZfDq5UaiIgklqXVlmx0NQ7DINPPHbgzBvR+6Sht3bbvH1oELVLOjSCoufmZ/Kx:m6OiRw6xA3N03eIbDBzhfoO+CgYZBp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4469a07ec5ea5ab3c8b2ee364956df6d_JaffaCakes118

Files

4469a07ec5ea5ab3c8b2ee364956df6d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e6dcf96996ea823e7a6f77eb23ca39a1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CallNamedPipeW
SetComPlusPackageInstallStatus
GetSystemRegistryQuota
GetEnvironmentStringsA
GetThreadPriority
CreateTimerQueueTimer
GetDiskFreeSpaceExW
CreateDirectoryExW
GetConsoleAliasesW
OpenConsoleW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE