86f76d70f2522176fc8bf4960bd3db59_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

86f76d70f2522176fc8bf4960bd3db59_JaffaCakes118
Size

66KB
MD5

86f76d70f2522176fc8bf4960bd3db59
SHA1

3d741abf5947bf57aadf8bd1a3f7a4e1e35aa324
SHA256

c5a8ab04d6ffa1358f60f8c4ae4eb396bfff2a0c7b862ef7710a1c929e52090e
SHA512

451fbb174e8d9c8203b2ef4892c34eb7b6fcf9ea994ce6c5c334281fdcf6d9fd09f93255a04e0cfa70f9a62f8f05c4bc01450c5aa46a18d99e1c36c0d3cdba7e
SSDEEP

1536:J4cUhXxJoT3Im+wEMSPK1UBSFrBz9W+F8xWWe+Ekm:JcUT3RBEFM/ZrcfZEf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86f76d70f2522176fc8bf4960bd3db59_JaffaCakes118

Files

86f76d70f2522176fc8bf4960bd3db59_JaffaCakes118
.exe windows:4 windows x86 arch:x86

38aa94a6c781a41e6eb7742d46f5bbd8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetNumaAvailableMemoryNode
SetDefaultCommConfigA
SetDefaultCommConfigA
GetVolumePathNameA
FindFirstVolumeMountPointW
SetConsoleCursorInfo
EnumSystemLocalesW
RequestWakeupLatency
WritePrivateProfileSectionA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE