94e1cc09aa62f9382cc1ebe15b1b496d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

94e1cc09aa62f9382cc1ebe15b1b496d_JaffaCakes118
Size

66KB
MD5

94e1cc09aa62f9382cc1ebe15b1b496d
SHA1

0fc1c0331ee5e1232db71cd9a72a49ce77568f8c
SHA256

07d83c1c34d975acdc7461d956725eed6b2d2a130e14c34cb2f3508443822294
SHA512

eedd71e05f06ce4c73de832b637bd286ab71d584cc843d4661f0e2ed22ae32d9998a002dfe266a9b274f52040379e52adbe9098b63e0d989c960e54e9c59955c
SSDEEP

1536:CdQKurHFgxVz4TqrNsXYlmj02jfFfUTt2+FOQWBaK7UXNd:2QKuryxVz4rYiJfu4MOQWBuXH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94e1cc09aa62f9382cc1ebe15b1b496d_JaffaCakes118

Files

94e1cc09aa62f9382cc1ebe15b1b496d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e66eca02b5555421f17cad83b98c6dc9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleHardwareState
SetThreadPriority
OpenProfileUserMapping
ReadDirectoryChangesW
GetCurrentProcessId
CreateMemoryResourceNotification
GetSystemWow64DirectoryW
FreeVirtualBuffer
BuildCommDCBW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE