89ddf470d319083ceaac2c2c31d7d5a9_JaffaCakes118 | Triage

Sharing

General

Target

89ddf470d319083ceaac2c2c31d7d5a9_JaffaCakes118
Size

56KB
MD5

89ddf470d319083ceaac2c2c31d7d5a9
SHA1

e1aa41fa9a133a0af49091235d3cd454348da94d
SHA256

a227fbfb7d105465d7082b02b91e998e8578533e0270c0f08058a2f1d55f9f38
SHA512

73f987f1281b7d146fa34d6ef30105071ccd347c7e29335ecf1d7fadd9d5226da52e677ff09df7c5bca6baf1d3a0f77535a57e5a384c24417880342368ee556e
SSDEEP

1536:GSbK1/TFlddnBvYMFJmiEKlSV78A+0omHv0mzfBBKkh9ch2iTXbhJSZTxzg+SRIj:I8XFsS1mbW/tA6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89ddf470d319083ceaac2c2c31d7d5a9_JaffaCakes118

Files

89ddf470d319083ceaac2c2c31d7d5a9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f3e45ab3c10334ba01884c8246108326

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetThreadIOPendingFlag
GetVolumePathNamesForVolumeNameA
EnumSystemCodePagesA
GetPrivateProfileSectionNamesA
DeleteAtom
GetSystemDirectoryW
BeginUpdateResourceW
SetHandleCount
GetLinguistLangSize
InitializeSListHead

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE