81f2a31af010e6d873d4bb74e27543dc_JaffaCakes118 | Triage

Sharing

General

Target

81f2a31af010e6d873d4bb74e27543dc_JaffaCakes118
Size

76KB
MD5

81f2a31af010e6d873d4bb74e27543dc
SHA1

b79676ae505f1ee0e527e061689df75427b83590
SHA256

2e25f868c533fc30ea81bedd8919219db1fd1c0bd07d82e5566f51b5d7fea149
SHA512

3d113da65aa0879a9fed0ff9a1564d71af71c71b47b5fbf06d88622f01ca01825dae7a570008d2cfa065ce5e3f36102efd71f16d915de84b6a557a2900cc2a9a
SSDEEP

1536:yJ4ojGveYU+G9LuK7+K3FCtLrLpOHroUq/82hW8fPL9:yGmY3GYWwtp20P/8vYL9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
81f2a31af010e6d873d4bb74e27543dc_JaffaCakes118

Files

81f2a31af010e6d873d4bb74e27543dc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8b7d0c5365b7d30b84791e6260c3654b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MoveFileW
CmdBatNotification
VerSetConditionMask
GetVersion
BuildCommDCBAndTimeoutsW
CreateConsoleScreenBuffer
SetTapePosition
GetComPlusPackageInstallStatus
CreateHardLinkA
QueryDosDeviceW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rrdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE