9634c7527cc164c79095fef43ec54cac_JaffaCakes118 | Triage

Sharing

General

Target

9634c7527cc164c79095fef43ec54cac_JaffaCakes118
Size

67KB
MD5

9634c7527cc164c79095fef43ec54cac
SHA1

7f102cda6caef7329464e44e2ad2307877ee416c
SHA256

8fa9eb8897df62c162240e58393de4d5012ba39372585b49f7cf09f8214b2520
SHA512

1b53a3752ca7cdc9e3ef570fd45e73fe90d0427d5fbfbf8cd6f436d235ff5cf23552ebc67f870637c1473a192a598282f8870e92b3278a4f2f3e0857d372d70a
SSDEEP

1536:Bu6JDPs1d1sgmvXmS96xl3gVMoHmvXg9ppIhb5hoOLa9Uf11zvvK:fJAinmS96j3gVBHmvgZIhb69U1zvvK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9634c7527cc164c79095fef43ec54cac_JaffaCakes118

Files

9634c7527cc164c79095fef43ec54cac_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9b96529c13ad6a3741b65c254430f5f1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleAliasesW
GetFirmwareEnvironmentVariableW
GetNamedPipeHandleStateW
GlobalGetAtomNameW
FormatMessageA
BaseCheckAppcompatCache
GlobalGetAtomNameW
UnhandledExceptionFilter
GetPrivateProfileSectionNamesA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 52KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE