9554f1d5e3ecb88e9437197abaee5171_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9554f1d5e3ecb88e9437197abaee5171_JaffaCakes118
Size

63KB
MD5

9554f1d5e3ecb88e9437197abaee5171
SHA1

14d268d11e894a74a8b85fdd9c4cee1fd348a94c
SHA256

dee9cba17f7220b3730293b2bf884806e30efd36101d73cb9a6881fe777dff00
SHA512

7fd94de0733fb2b1923865779fa75345721fd20d4957777b9a59ecf3c9b8f748ee551f6738e187e234171c0add42854e0642c24db4086e66538f2ac7b80860b0
SSDEEP

1536:a9O7ROS+ksNgkn2pWWRYfDzHtIrT+t5Eil1mHxPf:a9OlOJOYmWtLzHt2QZmlf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9554f1d5e3ecb88e9437197abaee5171_JaffaCakes118

Files

9554f1d5e3ecb88e9437197abaee5171_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e5b58c5e267e9d70ea5cac52be54b03f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteTimerQueueEx
FreeConsole
CopyFileExW
RegisterWowBaseHandlers
ClearCommBreak
FatalAppExitW
MapViewOfFileEx
GetConsoleAliasesLengthW
GetTimeZoneInformation
LocalCompact
WriteProcessMemory

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE