7911519e3f32b583253063457c27aeb8_JaffaCakes118 | Triage

Sharing

General

Target

7911519e3f32b583253063457c27aeb8_JaffaCakes118
Size

66KB
MD5

7911519e3f32b583253063457c27aeb8
SHA1

a27a4cfd0cc8012f185849914bec592e8d0e1f53
SHA256

de41b07eca9e93d9bb54daaca8c559e3a199a4791b430b6b6b607d88d90e9cb3
SHA512

6834042f60c2255330e036b8b13054761be3690af0a229a6a0bc8a2fd83772837ea783f88414294796e2908c4ba25d2741913925fa73d46b3d1e500c8b5276ae
SSDEEP

1536:1wSOtyX7oQthh6D6aOu71XfgQ/6C4cbHWTCXU9piNPq4V1kH3+:1z2HiafH79fx/9RbHFX0f4gH3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7911519e3f32b583253063457c27aeb8_JaffaCakes118

Files

7911519e3f32b583253063457c27aeb8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

81fe62d8b3bfc8be77a50b608b7d6315

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RequestDeviceWakeup
FileTimeToSystemTime
GetNumaAvailableMemoryNode
GlobalGetAtomNameA
HeapReAlloc
BaseCleanupAppcompatCacheSupport
BackupRead
GetSystemTimeAdjustment
EnumLanguageGroupLocalesA
InterlockedExchange

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE