883b77bc395c880626013b59475a3cf7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

883b77bc395c880626013b59475a3cf7_JaffaCakes118
Size

94KB
MD5

883b77bc395c880626013b59475a3cf7
SHA1

c011ca299685d0a1ea8d0df1feaf75f8c4e1b121
SHA256

13d6a5640df472407ebbb3ba2b8d83752b1a9045eb1f9bdc88151818925cfe28
SHA512

d4e9c42324789bb32054391a2b90c75a3853ce7f7e8c3d10a282618ff9f280da06c4dfb7259d2bfd7808428d2ced84a7061d41d87054d1e1e21c886bd77d11fd
SSDEEP

1536:f8rAjlDqhJ9fNdGA7DWioiTRBHQdX6QdtjtZV27KVaJ+EVDuGMM0r8c8YaEJwZKx:fc88BHWd9tZAGAUEVzV0r8hZEXtpxLLP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
883b77bc395c880626013b59475a3cf7_JaffaCakes118

Files

883b77bc395c880626013b59475a3cf7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e5c9f3a847d1821794ddaa447a82c700

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CancelDeviceWakeupRequest
GetHandleInformation
IsSystemResumeAutomatic
LoadLibraryA
SetConsoleIcon
GetConsoleKeyboardLayoutNameW
CommConfigDialogA
GetDiskFreeSpaceA
CreateDirectoryA
FindNextVolumeMountPointA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.krdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE