8b1884732ae20d6c91f62890d01e1de9_JaffaCakes118 | Triage

Sharing

General

Target

8b1884732ae20d6c91f62890d01e1de9_JaffaCakes118
Size

76KB
MD5

8b1884732ae20d6c91f62890d01e1de9
SHA1

87ce3813e3e38af1d72057691e7fd6e24d05dc90
SHA256

4f4559f10b78da47cfc63b436970bc739f4cefd78c391d6c62835ec278878574
SHA512

81fc9e886c2858c41e544f740a3f4987fd2a68d9f346aa258f10f3e69a10fa4b387c3390caea4aa22d49c4364fc4938e2e2d0508d6cd8502e939e784026ac6e6
SSDEEP

1536:SM12eo6l0OGXSeMWqJFlguyDnvkJuSOuxTkV2pjVrs2ryrd1vUQuq6:SUo6CBCRW+XyDnvMVO0TkAHs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b1884732ae20d6c91f62890d01e1de9_JaffaCakes118

Files

8b1884732ae20d6c91f62890d01e1de9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4a14756d2a1f7b3791595a1853c4e3ac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindNextVolumeMountPointW
ConvertFiberToThread
CreateMailslotA
GetConsoleWindow
ResumeThread
CreateMutexW
SetProcessWorkingSetSize
GetConsoleKeyboardLayoutNameW
GetDateFormatA
GetPrivateProfileIntA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE