83d3a98db6be347dd93e5e905e97e0d7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

83d3a98db6be347dd93e5e905e97e0d7_JaffaCakes118
Size

109KB
MD5

83d3a98db6be347dd93e5e905e97e0d7
SHA1

89a300e0059795cbe792a3cdebe820b6e6cfb658
SHA256

3ce7f3232bc012337200424aa85c6115da83d044ea218aa2a0cfbf6df70197f9
SHA512

86e13f7371f54ba3372dacfe9be85723d1792d9e498a8430f52bbf4aa1cdc0557f113489e11730692ab6ebeda3d3c0f889f16b03383f28223ff461723c7125fc
SSDEEP

3072:3kqK4KX+WUtFBINyFrYR2yGeNapWRZ+uX:3ZoCtFWirYRnOpsZ+uX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
83d3a98db6be347dd93e5e905e97e0d7_JaffaCakes118

Files

83d3a98db6be347dd93e5e905e97e0d7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

17cfdc2360104eca0893eb17ffd8b2b0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindActCtxSectionStringW
GetNumberOfConsoleFonts
QueryDepthSList
AddAtomA
GetCPFileNameFromRegistry
GetCurrentActCtx
HeapUsage
GetExitCodeProcess
SetComputerNameW
FindResourceA
GetUserGeoID

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 85KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE