8e3b1a263ddf29aa264f8a19faf6aec2_JaffaCakes118 | Triage

Sharing

General

Target

8e3b1a263ddf29aa264f8a19faf6aec2_JaffaCakes118
Size

63KB
MD5

8e3b1a263ddf29aa264f8a19faf6aec2
SHA1

13f279e37849b04f6537e139d2ad74efc5a9e483
SHA256

9492ad5f7deab039bbe2680b5a75ac7b4c48b51a7000036424be50706f758c65
SHA512

7ee7407b945efa9115ef086cf58f63a4efad67a27ab951bdee7b93e6614b4d6f7d8540ded627eb51e08ec4af13f7a18b9871934b9c6a891c52df22c6d16b6f19
SSDEEP

1536:5hjQ7ltxnH/7tl2feWiKge8p6QctN6krr11gGkpqC:jjQhXfufeWiK6ctbr11bkEC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e3b1a263ddf29aa264f8a19faf6aec2_JaffaCakes118

Files

8e3b1a263ddf29aa264f8a19faf6aec2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

99e039cd07445fd818d0716aa7e512e5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueryDosDeviceW
GetCPInfo
SetComputerNameW
WriteFile
WriteProfileSectionW
DefineDosDeviceW
LoadLibraryA
GetOverlappedResult
ReadFile
ReadConsoleInputW
ReadConsoleInputExW
CopyFileA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE