95b1068d73b1e67a6ba599ad8a31eb22_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

95b1068d73b1e67a6ba599ad8a31eb22_JaffaCakes118
Size

63KB
MD5

95b1068d73b1e67a6ba599ad8a31eb22
SHA1

218358dae64dba866fcb763edce8cd776ddb6694
SHA256

0e1fb60ccb7158d4faa1c4b828b2420c151551deab8470e93a5d8e0f2e408399
SHA512

f79decfebce52fab8f9d4be6aa81ed6d1d933fbedf850bfa2e21b0c6d2c1b5d3f43731d78af56873d6b534e6ab45c3a94139c0dbbe19f3608ccbc4a7220f262c
SSDEEP

768:UJIGS4SWSLn8VFg/zmWz+22o/lFprw0TiwLbY0DPsJouiWwFzba/Ppk5P55Q2kPU:UJIGEz+/S7hDkJpsNbaO8PjiHMxL4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
95b1068d73b1e67a6ba599ad8a31eb22_JaffaCakes118

Files

95b1068d73b1e67a6ba599ad8a31eb22_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6ac2db912e9258e23979c1ea5cf75801

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AddAtomW
SetComPlusPackageInstallStatus
GetModuleHandleW
_llseek
GetNumaProcessorNode
GetConsoleAliasesLengthA
GetComputerNameExA
GlobalFree
GetPrivateProfileStringA
GetCurrentConsoleFont
LZSeek

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE