95066e5e3537f204a93acd47b9550704_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

95066e5e3537f204a93acd47b9550704_JaffaCakes118
Size

71KB
MD5

95066e5e3537f204a93acd47b9550704
SHA1

cafef4c71c78cd5da5dffd1d5d1899176f8215c9
SHA256

0c3335409834aa9df205e8e9de207b8893ca29aaa67fee2b6b2e526ff2f5cdd6
SHA512

2f351a7934264a5c32b0061484ffbdd165e2690425a25473dfd8833dc43e7df31d03896baac625c82b17308dc0d58e93dd440dff1087b0cbe3e803bc779976b2
SSDEEP

1536:kcwx/8HfgejVohy/uwcKreokbt16hgtAoQK01ovbuZhKvazkAb:Axqf/jKhygokRdzzk4bueekA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
95066e5e3537f204a93acd47b9550704_JaffaCakes118

Files

95066e5e3537f204a93acd47b9550704_JaffaCakes118
.exe windows:4 windows x86 arch:x86

946d24de3f94e9f0c55034ae8f559ad7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetThreadPriorityBoost
CommConfigDialogA
GetWriteWatch
QueryDosDeviceW
FreeLibrary
GetNativeSystemInfo
SetVolumeMountPointA
GetConsoleDisplayMode
RtlCaptureStackBackTrace
EscapeCommFunction

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE