86071325151f8a63f3885f2bad8f49ab_JaffaCakes118 | Triage

Sharing

General

Target

86071325151f8a63f3885f2bad8f49ab_JaffaCakes118
Size

83KB
MD5

86071325151f8a63f3885f2bad8f49ab
SHA1

bf639df1aaaab7e156b5bb5799825bbf5a5da3ad
SHA256

ea3844ba5b1e31577da232299c39074828840889f398b54d2002236e6963166c
SHA512

d95f310f59f9ee2334a6aa2dae694834e9c6181d380ce7ffef2ecbf4bcccd9173a66eaa5c13ef04f5430039919099c79b4a196d1cb2e7039aad99e68ce1bef4a
SSDEEP

1536:eUqMCNL2sTO90hhXpbsCwDinMdmKt+xqb5QzNaj2hi9jEErxTWDTMqhGKYIZTETr:7vCNL2sq9yhZbsCJAttD5majT9jBkMq4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86071325151f8a63f3885f2bad8f49ab_JaffaCakes118

Files

86071325151f8a63f3885f2bad8f49ab_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2517251568d8fc1ded398ffabf1c10cf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetNumaHighestNodeNumber
WritePrivateProfileStructA
Toolhelp32ReadProcessMemory
ExpandEnvironmentStringsA
GetConsoleKeyboardLayoutNameW
CreatePipe
DnsHostnameToComputerNameA
GetComPlusPackageInstallStatus

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE