79048b02ee3aa866dcbb5409e53282a1_JaffaCakes118 | Triage

Sharing

General

Target

79048b02ee3aa866dcbb5409e53282a1_JaffaCakes118
Size

56KB
MD5

79048b02ee3aa866dcbb5409e53282a1
SHA1

6c3d3f6b8e905ea5c3e03d7d307587eedd98c814
SHA256

22a435723ac23a17aad893d3c214e70c045431f4ed82f460bfc09cc390782c61
SHA512

7d92f5cdb5582d190730591e72cb7416b951b5c1adfc374dfa222e2a7bb23b4e4050a23aa5a4f5b81521d6db2d68815408263965e546b7e94872c1b349869b4b
SSDEEP

1536:YwLxSAPod2cOA3LTt8P4o4rfnCuU9d0loeIMH5MSdgep4TfFpMQDkWmhJlgr:YG7H0lfIOMOgepUPT4WKc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
79048b02ee3aa866dcbb5409e53282a1_JaffaCakes118

Files

79048b02ee3aa866dcbb5409e53282a1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8365db2361b111e19d350b6f5eb361f6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleHardwareState
SetLocalPrimaryComputerNameW
ExpandEnvironmentStringsA
QueryInformationJobObject
QueryPerformanceCounter
TerminateJobObject
GetVolumePathNamesForVolumeNameA
SetConsoleTitleA
GlobalMemoryStatusEx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE