83619ef4141af7dd3f3bc0fb34a8c2bf_JaffaCakes118 | Triage

Sharing

General

Target

83619ef4141af7dd3f3bc0fb34a8c2bf_JaffaCakes118
Size

56KB
MD5

83619ef4141af7dd3f3bc0fb34a8c2bf
SHA1

b3d6264454bad3bd6b087c86c717e55ede96bc93
SHA256

630d105c2a715790f738f9a293a30e7b010fabbcb48c7bd26dbc624a68192588
SHA512

9b97c817bbe58c60bfc1c2c5d2c1f8f7645d39b379994a3c668040150a7d1b67aedfa00b2bf825119de02d53129e29ab171b182932dd41aefd94d944ff51c678
SSDEEP

1536:XyYDI0+zhgcIYOqbbcWOd5Mf8dDv2JoiBOyOHqBbfNBkX6:XyYpGhgcIYrcWOMfSDOuivOHQbfNA6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
83619ef4141af7dd3f3bc0fb34a8c2bf_JaffaCakes118

Files

83619ef4141af7dd3f3bc0fb34a8c2bf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4d870665708e9984b455141cf33e1bfe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetThreadPriority
FoldStringA
GlobalUnfix
GetConsoleKeyboardLayoutNameW
LeaveCriticalSection
SetThreadExecutionState
TerminateProcess
SetCommConfig
Heap32Next
QueryDepthSList
SetConsoleCursor

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE