8451cd082cf6871b78c4f76c124be8f3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8451cd082cf6871b78c4f76c124be8f3_JaffaCakes118
Size

76KB
MD5

8451cd082cf6871b78c4f76c124be8f3
SHA1

9c5137fe511ed9a14be910b82bad8c607dc4c54b
SHA256

d76258ce8eeef3c647fc50378ba4571e9dd0254d353a74c407a5e78e08823f2d
SHA512

cdb3380188d25d311a6baf00297f77e8cad54a4a3d0b8cfbbed3a3eb49a925ec12b50c58213b56724b7fdc7611e59d577f972a2efdd3e68b550ec5272716cf8c
SSDEEP

1536:2vEbNJi0FVxx36KvN8pRBouIJB9fu/toyf6yNrpjVrs2ryrd1vUQuq6:QEpPdx36uNWQuIzAzrHs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8451cd082cf6871b78c4f76c124be8f3_JaffaCakes118

Files

8451cd082cf6871b78c4f76c124be8f3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0ad3920ebb7b861d50bf9b1aa3e1405e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalLock
EnumCalendarInfoExA
EnumResourceTypesW
TermsrvAppInstallMode
FindNextVolumeW
Module32FirstW
DeleteFiber
Module32Next
GlobalFix
DecodeSystemPointer
SetConsoleOS2OemFormat
SetProcessWorkingSetSize

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE