74aba93397d87c2d6fd09a33ae83af0e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

74aba93397d87c2d6fd09a33ae83af0e_JaffaCakes118
Size

63KB
MD5

74aba93397d87c2d6fd09a33ae83af0e
SHA1

9dd34dd003008e5b6dc462213cbd039c4c5f55d1
SHA256

784aa7f1ea15d1fa1d5bb8f78cef9f6d82a96c1ba56ee458966ff073aac946db
SHA512

cc9fd910413c5a31bf2bce4beb557949127ffbcaa8b1f29ac11f240440121c0e1a1035ed9722f4c5168a09290fc1335b882f86327571812243c04d454c54c4cf
SSDEEP

1536:1qLDYxbmV6G3bLpszvJRf+kq5zLxpTcYSAkn:RaV6kmzvDqVTbFkn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74aba93397d87c2d6fd09a33ae83af0e_JaffaCakes118

Files

74aba93397d87c2d6fd09a33ae83af0e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dd25278c372174e4ecfd256cf7b21d4c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeUserPhysicalPages
MulDiv
GetModuleHandleExA
AddAtomW
GetPrivateProfileSectionNamesW
SetClientTimeZoneInformation
CreateMailslotA
SetProcessWorkingSetSize
GetConsoleFontSize
GetNumberOfConsoleFonts

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE