968d23b9d0f86785e81b5c5dc81d68b9_JaffaCakes118 | Triage

Sharing

General

Target

968d23b9d0f86785e81b5c5dc81d68b9_JaffaCakes118
Size

63KB
MD5

968d23b9d0f86785e81b5c5dc81d68b9
SHA1

032f63dff17f48f70df132745cd2ce51890846f6
SHA256

9afe11b404e2c2dcc469a2a10e5ee52caee3dd0c04da2dffcb0813fc1143c642
SHA512

cf22e82fad88c1f34f9ef008cc2c6430bb2f8730f4acaeee458ad1b1cc026250b7ee7703f1db1df970f71eec058467d9bc07fb93cf357e7c58285330d69263b9
SSDEEP

1536:aAllbj/Ameje3b6931iU/xhq5Mtfex579mNDRBCj:aAldDAmeK3bKNLq5ffMNDm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
968d23b9d0f86785e81b5c5dc81d68b9_JaffaCakes118

Files

968d23b9d0f86785e81b5c5dc81d68b9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f35ccc10232c8312ecb1b544bfc31028

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RegisterConsoleOS2
GetConsoleScreenBufferInfo
GetFileSizeEx
WriteTapemark
GetSystemRegistryQuota
CreateWaitableTimerW
RemoveLocalAlternateComputerNameA
GetSystemWindowsDirectoryW
FindResourceA
BackupRead

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE