77a160bb0fb54df20c5e50bf25d6d9e2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

77a160bb0fb54df20c5e50bf25d6d9e2_JaffaCakes118
Size

280KB
MD5

77a160bb0fb54df20c5e50bf25d6d9e2
SHA1

5d3554360357acec7c5cbc3da100e9bf48bbf77f
SHA256

586fcf67b13c5129eb29583796233c01a9fb8ff6f4b1e7833f82eb1f7cd2ef9f
SHA512

07cef8b43b1fb6c02d1611746bc5e4fa44b83416957ea88e692d768fdc7e2f49ba8bd14e4396a259efef18588add0f267c5b602446419321359072ee37d7fe01
SSDEEP

6144:y5vIw1pFiCFn4oFoA26K4McUGdc6KdU6RVzKT7YamtvuE:y5vBp8CFrFoA26KMU76MNYMLvuE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
77a160bb0fb54df20c5e50bf25d6d9e2_JaffaCakes118

Files

77a160bb0fb54df20c5e50bf25d6d9e2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

262a92b4d122c9558423d0a9e08dc634

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

memcpy
memcmp

kernel32

CreateFileA
CreateDirectoryA
CreateFileMappingA
Sleep
VirtualAlloc
VirtualFree
VirtualProtect
GetProcAddress
LoadLibraryA
GetEnvironmentVariableA
GetMailslotInfo
GetFileSize
GetConsoleMode
FreeLibrary
DeleteFileA

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 722B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 228KB - Virtual size: 225KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 870B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ