712c8392c49007ffe3dc0d6e5e3b84b1_JaffaCakes118 | Triage

Sharing

General

Target

712c8392c49007ffe3dc0d6e5e3b84b1_JaffaCakes118
Size

56KB
MD5

712c8392c49007ffe3dc0d6e5e3b84b1
SHA1

a4014bf1e502a7685edc328decadb8facd446bfd
SHA256

5f3b703aaeed19b377076fd9ed9a95350f66a76ea9f7fa007f7743efc8e8ba69
SHA512

028fb212e64bd09aa3dd5af43ca8140c167882a063498a08dd999d1b89ba3105df56dfcbb2d1d4e995c93163a03f9b1d1e4223a60c3bf73d27ddb008b6e5f88c
SSDEEP

1536:VH4/SJgBvS0OCqiZuciXZfV0G5TguxC0hdibdE5:CygBpO8ZFiXZfVvguk0hdF5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
712c8392c49007ffe3dc0d6e5e3b84b1_JaffaCakes118

Files

712c8392c49007ffe3dc0d6e5e3b84b1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

886728a915b679dcdd740b5c2f77da97

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetupComm
FindNextVolumeMountPointW
InterlockedPushEntrySList
DebugSetProcessKillOnExit
GetMailslotInfo
SetSystemTimeAdjustment
TlsSetValue
AssignProcessToJobObject
SetCommMask
GlobalFix
HeapWalk

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE