667913a5f8a556e81ce7467dd3789a21_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

667913a5f8a556e81ce7467dd3789a21_JaffaCakes118
Size

63KB
MD5

667913a5f8a556e81ce7467dd3789a21
SHA1

b986f95ba4ba991d398e390b62f4b681b8cf7499
SHA256

f138de7e7e8c08b42d5f2ba5e9f15deea2efbb0a225bedff36b8d59e120515e5
SHA512

7dfbf1682e11bbb4428d914c56e8076eab6c7f2867721cd3f8e15389af59a4da527f412d5b5f2dccbc89b3086d5d4cc0796d1ac31e89d1161ac7ad470af8fd4d
SSDEEP

1536:4dtSkuW2TJBloliVTU03pY+trOyiOfD8tBAoqXRWBTbF18s9:4dtSkG3l/d5YwpiCu5B3Dt9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
667913a5f8a556e81ce7467dd3789a21_JaffaCakes118

Files

667913a5f8a556e81ce7467dd3789a21_JaffaCakes118
.exe windows:4 windows x86 arch:x86

44e3b071348c0657633e1725520be916

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WinExec
EndUpdateResourceW
BaseFlushAppcompatCache
GetNumaAvailableMemoryNode
EnumDateFormatsExW
SetFileApisToOEM
GetFirmwareEnvironmentVariableW
GetConsoleAliasExesLengthA
BackupRead
CreateJobObjectA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE