85b969f899a0e791690f152e51a2ef91_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85b969f899a0e791690f152e51a2ef91_JaffaCakes118
Size

56KB
MD5

85b969f899a0e791690f152e51a2ef91
SHA1

6167ea60a0a7f8fbf48b4d7dd7d56cafd10894a6
SHA256

fb8fc4fab04f0421b8c440b71d2590633ad65e4e62910b7d9478d97972a2598b
SHA512

003d58c96ebfd9163d529d8a39b6a416e3892fa4b58c8d58a5bf2df3d56a3b27bfaed41c436b25fac3d555ccd8baaa0fa2976a825c7b4c1f9b167018a6ea2b0f
SSDEEP

1536:OX+OWUm74y8ozvEBlqsPqXmiRMl9x+ULqOZH:uFs0DhdUCNH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85b969f899a0e791690f152e51a2ef91_JaffaCakes118

Files

85b969f899a0e791690f152e51a2ef91_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9120e5bcbd56ce8549623d1adceeb7f5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetProcessPriorityBoost
QueryMemoryResourceNotification
GenerateConsoleCtrlEvent
ReadFileEx
GetSystemPowerStatus
BaseCheckAppcompatCache
WaitCommEvent
MultiByteToWideChar
GetDiskFreeSpaceA
GetStartupInfoA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE