773612f2cb21d2e859bfaa05e6d4769d_JaffaCakes118 | Triage

Sharing

General

Target

773612f2cb21d2e859bfaa05e6d4769d_JaffaCakes118
Size

62KB
MD5

773612f2cb21d2e859bfaa05e6d4769d
SHA1

5b4395517d58825efe385b5112d2305fc541b94d
SHA256

5bdbef91f9712dc87bb3184094f8401f2eabf42a06188a301af3bc766fc8db91
SHA512

5277b689117d8ffe1ba8846722fc06a2bc021869b70b8a1fa43aa57f9ea6c3b8a2bd1c32ed92a1429e9c36e23b0e1abe2d395d698e99501c29e427a7a3b2e15f
SSDEEP

1536:ZteVU5h2e7t7UJ/SEddgp3h7vstu+a36liUCjH0EEe:Z0aq5Q1Ou+NGjHEe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
773612f2cb21d2e859bfaa05e6d4769d_JaffaCakes118

Files

773612f2cb21d2e859bfaa05e6d4769d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

68652beda1ad3ad70db6a56772da86b4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapQueryTagW
SetConsoleInputExeNameW
SetDllDirectoryW
GetNumberFormatA
InterlockedExchangeAdd
OpenDataFile
GetCurrentDirectoryW
MoveFileA
UnregisterWaitEx
GetACP
EnumSystemCodePagesA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE