697d47e9009d2447f916e23ca4b915b2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

697d47e9009d2447f916e23ca4b915b2_JaffaCakes118
Size

83KB
MD5

697d47e9009d2447f916e23ca4b915b2
SHA1

7a150a47ba53b54e713d523b1cc4f389d691fc87
SHA256

a8f3095f2c1ffdd04ce63531d027ce5c3f750b11e49907552d402c073e58796b
SHA512

1faffe1a0306099d42c98994136fd42a186ddf81ba8f294e1354a5cc7bbbd7849dba6ee0df903dd150420bee3b398a6062682da711da9c46109490f08a25d72a
SSDEEP

1536:q0G0gLyXVgkhBSe7UBvhCRviWayISqKhI2dIf1bjEErxTWDTMqhGKYIZTET8bDQ:u8p4vc8BKqKS2dqjBkMqhGKZTbbc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
697d47e9009d2447f916e23ca4b915b2_JaffaCakes118

Files

697d47e9009d2447f916e23ca4b915b2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

253db27abe7b452b45f09ec4f23e4eae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
LoadLibraryA
GlobalWire
WaitNamedPipeA
VirtualAlloc
SetTermsrvAppInstallMode
FatalAppExitW
GetExitCodeThread
GetModuleHandleA
CloseHandle
CreatePipe
WaitForMultipleObjectsEx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE