690e8729a2eefec7c61698b5f75100e9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

690e8729a2eefec7c61698b5f75100e9_JaffaCakes118
Size

36KB
MD5

690e8729a2eefec7c61698b5f75100e9
SHA1

ce134520c1da98c7e517e00b92f296a8599c3fe1
SHA256

725df58e891a3a650d95d2056bf415d631cdfbb8dc462a503dce8709b5a6ec44
SHA512

570343932c156082f21e062188d8759871218b71423337b2a84f319e50f39ab3098acc929efc800742ef5e8d672d0a30d1ea8deb7b7399b4fbeb6b33e949184d
SSDEEP

768:K4qdZT3oq2NunBl29VTdtdjgMVwx56lk9jJEB6WK7yfBHY:KHZzn2Nk+VTdtdj3HGdJEB6yO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
690e8729a2eefec7c61698b5f75100e9_JaffaCakes118

Files

690e8729a2eefec7c61698b5f75100e9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1eb6818e0f6d571c7b44b543945027dc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
InterlockedExchangeAdd
GetEnvironmentVariableA
GetProcAddress
SetEnvironmentVariableA
GetModuleHandleA
LoadLibraryA
RtlUnwind

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE