8b491dc2c04ec4fdc75428f311682b33_JaffaCakes118 | Triage

Sharing

General

Target

8b491dc2c04ec4fdc75428f311682b33_JaffaCakes118
Size

63KB
MD5

8b491dc2c04ec4fdc75428f311682b33
SHA1

fe7e5df3d53c5f7d64148b5d026d369c7efe6301
SHA256

0e1e6601f324b3921d70fc0831e0363a45bffab48aed3e090524c92fcd7c4a9f
SHA512

dc3505ef03310ee349fbb9a90beb50bdfb07295640bbef270f7a8e41d1aa4f762539e9b11feff06f1b6b475ddf9849f73e50b1d740777087c92a820c5b5372fa
SSDEEP

1536:3vjNN3sTrJ6bp0+6WVnr6E/hnB1/kRkFeUwo/Msy:3vj3cvJ6bpT60nrZ/hnB1/GkFeUwoy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b491dc2c04ec4fdc75428f311682b33_JaffaCakes118

Files

8b491dc2c04ec4fdc75428f311682b33_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cc6382793d193cfa73ac5195b1ac564b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteTimerQueue
ClearCommBreak
DosPathToSessionPathA
HeapValidate
EnumResourceTypesA
GetNamedPipeInfo
OpenMutexA
GetCurrentActCtx
GlobalGetAtomNameW
GetDefaultCommConfigW
GetPrivateProfileStringA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE