84c19da395d81c93cc66c05ab9e3968d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

84c19da395d81c93cc66c05ab9e3968d_JaffaCakes118
Size

83KB
MD5

84c19da395d81c93cc66c05ab9e3968d
SHA1

d38f0ee204ce6bc0219d9ff143cef0bc51fe8cb8
SHA256

a07bf8fa11e69be24d4e2b40740d1794c3ba8c0d109fa6aa4d2675111bb9f2b2
SHA512

01a9e6f19ff356825b21c4958849209b5bc6c8179a8d78ef0bc03e4268a0e0f11a567181634d03692a8c9f7ff4245d2a7bb81ddc1e9da03a78246a5f96ab5865
SSDEEP

1536:PEyVjQK6gQKh0hWWIXKiaJ7RTXngP1DxA6Sl7rpjVrs2ryrd1vUQuqwcizSkX:syVcto081aJ9XgtDxAzl7rHs2quciu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
84c19da395d81c93cc66c05ab9e3968d_JaffaCakes118

Files

84c19da395d81c93cc66c05ab9e3968d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c10438b42dcc10c98ce36c9c2dd49495

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AreFileApisANSI
GlobalSize
FreeEnvironmentStringsA
SetConsoleInputExeNameA
NlsGetCacheUpdateCount
FindNextVolumeA
lstrcpynW
CopyFileW
ReadConsoleInputExA
WaitNamedPipeW
CreateThread

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE