951263d565eb47c24260162a68599d1d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

951263d565eb47c24260162a68599d1d_JaffaCakes118
Size

66KB
MD5

951263d565eb47c24260162a68599d1d
SHA1

c7fde15a0da5cd535ff324f3218a56a0308c7833
SHA256

e4598562fb2d670c14ff11c9a3c44674a7d0e41dc4672d0a8fa87be47c6cd5d3
SHA512

90704320a92f39295666d889c13f74539f2fc6b8368790c126423cc0b8796e44451ce6d00890d4278831582b29a915f86ce6c796456bdbcd742dd9cedf8f0f92
SSDEEP

1536:d2YJMxdcffLrPfQQyYoqrYiLJZM75FlG0PzWvC3z2VsQNXY8:LyMjPKqrPMM0Pzioz2/X1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
951263d565eb47c24260162a68599d1d_JaffaCakes118

Files

951263d565eb47c24260162a68599d1d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4258eb132d2577e56c7e67930e7f0f5d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RegisterConsoleIME
GetModuleHandleExW
IsBadHugeReadPtr
ReadConsoleOutputA
GetPrivateProfileStructA
NlsResetProcessLocale
FindResourceExA
CreateToolhelp32Snapshot
HeapSetInformation
GetNumaHighestNodeNumber

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE