94d8a85038a24132f9191afaaf2c4873_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

94d8a85038a24132f9191afaaf2c4873_JaffaCakes118
Size

83KB
MD5

94d8a85038a24132f9191afaaf2c4873
SHA1

ea9ba0585cd8b71c4a1d213141ffdbda07910810
SHA256

b52eb49f3ed0347cabf38a6d1c1283597f70d5a6fea4554b620cc615e43727a6
SHA512

dfb01d01a79dc4f7c9c74e3a39bc93d76f82c1f523d548514c44640fb0ffe7497ad2b7c2903c09d593617be5497547139c849c15dfac69eb434ecc0f1c447d81
SSDEEP

1536:foW5l3XBunCqmKvFs7wNOUb29hNi7ai6wux+ozS/njEErxTWDTMqhGKYIZTET8bc:34mKd88b29zhwu0hjBkMqhGKZTbbc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94d8a85038a24132f9191afaaf2c4873_JaffaCakes118

Files

94d8a85038a24132f9191afaaf2c4873_JaffaCakes118
.exe windows:4 windows x86 arch:x86

31f2b8177bcbb0479114d48b77cc145d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateJobSet
FindFirstFileExA
WriteConsoleA
RtlFillMemory
GlobalGetAtomNameA
FindFirstFileW
OpenConsoleW
GetComputerNameA
PeekConsoleInputA
LZOpenFileA
AreFileApisANSI
FindFirstChangeNotificationW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE