8df79e420ec9cad56c64075e5641b375_JaffaCakes118 | Triage

Sharing

General

Target

8df79e420ec9cad56c64075e5641b375_JaffaCakes118
Size

56KB
MD5

8df79e420ec9cad56c64075e5641b375
SHA1

d14a7f26b3453639056100aa90d6cc78e0a6b7df
SHA256

3299ce881e01dcf19b8b1137289674fea5a0bb53571c1e2f10d5a5274857e791
SHA512

85425a9eed356f8ff02b685a3088689b3c84c1ff610c85f02ffc5bb24b0e42e3676879be9cb340708a2eb478b7fc75783ebaedf7bf9f814ab39ed4c70232b6da
SSDEEP

1536:mEKu+FE1BnL27A+ARGXxtvhbi/AKtB7EDLY4qiFRf0Gw:ouo+iEGXxtZIA+7gNqcw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8df79e420ec9cad56c64075e5641b375_JaffaCakes118

Files

8df79e420ec9cad56c64075e5641b375_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0d875776bf47255c448802ddf3267c11

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteAtom
DeleteTimerQueue
DeleteFiber
BackupSeek
ClearCommBreak
BuildCommDCBAndTimeoutsW
DelayLoadFailureHook
LocalShrink
SetProcessPriorityBoost
FillConsoleOutputAttribute
lstrcatA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE