78c9a60fa3dcf322eefa8d3b302731a2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

78c9a60fa3dcf322eefa8d3b302731a2_JaffaCakes118
Size

63KB
MD5

78c9a60fa3dcf322eefa8d3b302731a2
SHA1

eeb22344553b0afd20085b9c20dec8bb4418e823
SHA256

b00115de66655fbaf797311946830718b4a85ff97e91b567b745ebbbeec31ee9
SHA512

a4855573c81c350cd28f8b6e8766b07f9bfb59b02467cb798b8aafd757602345f1f144f8da07fd49bad8776ea9ab66ad6a79a5c78379565c75efe5996838aa33
SSDEEP

1536:ug3nbCqiMB327zhJgaJ5MQNKO+lzJN9xXGJPCMNQbKy:ug3nmg27lJ5MQNp+B3PWJ6oW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78c9a60fa3dcf322eefa8d3b302731a2_JaffaCakes118

Files

78c9a60fa3dcf322eefa8d3b302731a2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

04c1b8417353d5f416156d0e558c9f2b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateJobObjectW
PurgeComm
SetFirmwareEnvironmentVariableW
GetMailslotInfo
SetFileValidData
LoadLibraryA
Toolhelp32ReadProcessMemory
GetStringTypeW
SetThreadIdealProcessor
LocalFree
FindResourceExA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE