7084282fd307457d59c22cd75fc880fd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7084282fd307457d59c22cd75fc880fd_JaffaCakes118
Size

56KB
MD5

7084282fd307457d59c22cd75fc880fd
SHA1

9ee9a8cb6168bb1de647525d8e34bb3679cbc713
SHA256

43f1fb785b9957bcde3d13a306e91b09d9ae5e6aaec056d3ef48d80d95b7ec0d
SHA512

0192ee67e85db24a1fe0fba2a950715e9ad5f3f323f44584fd9d6af495ca2820b1e7ebe112d3e3985195838df7b94ac23221dbf3d89fd6f21c72a8dd205cfb6d
SSDEEP

1536:9qFuJjtsWX9/aWqajIRQMaazeucddDlv4:9kojG2NaWg9aazOhlv4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7084282fd307457d59c22cd75fc880fd_JaffaCakes118

Files

7084282fd307457d59c22cd75fc880fd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cc0bba657ada2ad6c62ec04d6f48edb5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BaseInitAppcompatCacheSupport
DeleteTimerQueueTimer
ExpungeConsoleCommandHistoryA
InterlockedCompareExchange
BuildCommDCBA
FlushViewOfFile
GetLongPathNameW
NlsResetProcessLocale
GetCommState
GetConsoleAliasesW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE