851721f20107fbba348aa725621053e8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

851721f20107fbba348aa725621053e8_JaffaCakes118
Size

62KB
MD5

851721f20107fbba348aa725621053e8
SHA1

5f31bb41eb790391f2740c9a50e2693cca75992c
SHA256

d5fe4fc7bfc7da23972040aa147e50ceca530b250e00602761c46dc7219a072d
SHA512

0130461f21248c87b0a8f44390cf7c6de03733eb4a3c0e689d5ce3c6c0c776fd3d83e9738062f5744e5cfa4682c0c7e4773aed90f22d46d50292389c2212966c
SSDEEP

1536:onAaEfKY8MbShmQGMSYDLIRLleLGeVqA75C6Kt6Z83Ya:MiF8fmQGxwsC7v5pKtaKYa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
851721f20107fbba348aa725621053e8_JaffaCakes118

Files

851721f20107fbba348aa725621053e8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0cbac0bce5384a908b434d69de1954bd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastError
GetUserDefaultLangID
WriteProfileStringA
CreateFiberEx
Thread32Next
CreateProcessA
SetMailslotInfo
HeapCompact
SetVolumeMountPointA
VirtualFree
SetCommState
SetCalendarInfoW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 36KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE