773ccff093c8cc1e0cea130247e397b9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

773ccff093c8cc1e0cea130247e397b9_JaffaCakes118
Size

63KB
MD5

773ccff093c8cc1e0cea130247e397b9
SHA1

e147ce8ac124404fda40b578b7a9892c9496f8aa
SHA256

27cfd26f20f18cedab4bc2a0b0e435d39187a350d0d24f008984ae8f9f28a3ef
SHA512

85ef5fe49d38380839374261aafada2234e6a78ccffe77f6c650a7aa9fc562a3b25995f8ef083f790b7e319205285d8b2da5aa075a6c72937668f3b24c3da3de
SSDEEP

1536:Sb+HJrAWu2c/G9z5KTEfluo0HBWrpQRfHxzvVisMn:SbBb/G9cTAlugGRfRz3Mn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
773ccff093c8cc1e0cea130247e397b9_JaffaCakes118

Files

773ccff093c8cc1e0cea130247e397b9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

61f7b694fb3873d7ae4a2e2f537f172d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadConsoleOutputW
UnhandledExceptionFilter
PeekNamedPipe
GetProcessTimes
GetDriveTypeW
AddAtomW
EnumResourceLanguagesA
SetEnvironmentVariableW
CopyFileA
_llseek
GetNumaHighestNodeNumber

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE