47d9af2721aedb3eb62ab463c6bc8813_JaffaCakes118 | Triage

Sharing

General

Target

47d9af2721aedb3eb62ab463c6bc8813_JaffaCakes118
Size

94KB
MD5

47d9af2721aedb3eb62ab463c6bc8813
SHA1

c7382eb2ba7c419b15290812e514449f9de9b1c8
SHA256

562d001a0d7913593f7248520d9d1eec52d677d66850d50490dd5ec00b25e4c1
SHA512

433e47482185ad8845e941a7254fb7ec516504c5e7ad1a2bf924606dbfe0b6ff7d60c7f9781369426eb87b81ae77a641428416efb9311e2b1b731b54d52746b2
SSDEEP

1536:oO2NRIzHsDmx5jIiVXUkwMknxRBVwwFSaoeM0Dvc8YaEJwZK4/83ZoMOALLbwTc:8kx5PcMknnTIaoovhZEXtpxLLbCc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
47d9af2721aedb3eb62ab463c6bc8813_JaffaCakes118

Files

47d9af2721aedb3eb62ab463c6bc8813_JaffaCakes118
.exe windows:4 windows x86 arch:x86

16fd2e359d6c4d8a04b023e20147596f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeResource
FindNextFileA
ReadDirectoryChangesW
SignalObjectAndWait
Thread32First
CreateHardLinkA
QueryDosDeviceA
Thread32Next
Heap32First
VirtualQueryEx
UTUnRegister
EnumSystemLocalesA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.krdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE