8238c9db2fa4c4fb9d87fc292908969a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8238c9db2fa4c4fb9d87fc292908969a_JaffaCakes118
Size

56KB
MD5

8238c9db2fa4c4fb9d87fc292908969a
SHA1

22527723e18263601e3567dda429ae263c0b6136
SHA256

a54368f34ebdc3f4227f8fb706767ec489f1decb12db5790703390047fbf81d1
SHA512

4772015e1f4de576c0238c071c9c141439bf9c7c281e6fee659768f3ec4a7c1b83b546d974e2aa69351bbceea437af7abbdccb208cf27fdf37c7312eae05135a
SSDEEP

1536:Wcr5L/RZGFrqVHa/YepRhR+5EBEiz8ZfJNU4GUICHwRDV7sQDh3:dr5LuFbNpPR+eM/tIUwJIKh3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8238c9db2fa4c4fb9d87fc292908969a_JaffaCakes118

Files

8238c9db2fa4c4fb9d87fc292908969a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

313b86423915bf4525c1bcf544908bb4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenSemaphoreW
GlobalDeleteAtom
GetProcessPriorityBoost
Heap32First
FindVolumeClose
GetCommConfig
CreateFileMappingW
GetProfileStringA
CreateMailslotA
DebugBreak
LocalAlloc
TrimVirtualBuffer

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE