82a05a023b5bb08da1c7c6db6c0e5fce_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

82a05a023b5bb08da1c7c6db6c0e5fce_JaffaCakes118
Size

71KB
MD5

82a05a023b5bb08da1c7c6db6c0e5fce
SHA1

0b686d1ab20d53ddca3d50f48081378db38ac504
SHA256

d5c02039395233c098de4e0b3c978d393d94a78eb942b8e04865890b885806c7
SHA512

52720e92fd3da27d9381d412442bbcdc8b8f9892399ed6ee00e5572977f131a356b9501aacf68d84599aa5db37448ac41565a00f10082b272c6d31c807516516
SSDEEP

1536:6lXs5CiiKeTH6MyRhC4GAjmgzoP/9J8OWc8pe7IV:6lXs0iiTH6MyRhvGAjmgkb8C8g78

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
82a05a023b5bb08da1c7c6db6c0e5fce_JaffaCakes118

Files

82a05a023b5bb08da1c7c6db6c0e5fce_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1ae7a21215d27c3125d5150db82c30b5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstChangeNotificationW
GetModuleFileNameW
SetThreadAffinityMask
CreateDirectoryA
UnregisterConsoleIME
AddConsoleAliasA
DebugActiveProcessStop
GetLinguistLangSize
GetConsoleAliasExesW
AllocConsole

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 57KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE