7911b9eaf412c367317765bc588962cb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7911b9eaf412c367317765bc588962cb_JaffaCakes118
Size

83KB
MD5

7911b9eaf412c367317765bc588962cb
SHA1

71911cf6ba521fc90e3fe075cecafd4a8e07b5f0
SHA256

1a636ef08132f1f2039468ea2010d89eb7dc216ba6494d548dfab287d9218174
SHA512

b9730d91f615b3a30c646af9dd56814da4950fa16e228abb41277ef232c5496419a91a708c0af0f2fd8c787ee3b0d4f326f3356f9eef7c200480ea155c16a1d5
SSDEEP

1536:qv8v8v8vdK+9tQUoWNZyucuJ6e7d16Vju8QeKGAZjEErxTWDTMqhGKYIZTET8bDQ:i000fVH+Pe/yju8EjBkMqhGKZTbbc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7911b9eaf412c367317765bc588962cb_JaffaCakes118

Files

7911b9eaf412c367317765bc588962cb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0e6bcb24f4d02645e8a9530e8f8bbc00

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempPathW
EncodeSystemPointer
SetThreadAffinityMask
CreateDirectoryW
CheckRemoteDebuggerPresent
QueueUserAPC
AddVectoredExceptionHandler
InitializeCriticalSectionAndSpinCount
TerminateProcess
TerminateProcess

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE