a1a2cc366641a6ea83fcaac70fa294d3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a1a2cc366641a6ea83fcaac70fa294d3_JaffaCakes118
Size

67KB
MD5

a1a2cc366641a6ea83fcaac70fa294d3
SHA1

b045b7f70aa5999fbc358a1194db80d0d0affcdb
SHA256

d2071a677a6551f3334d648824cea9629f213b0277acf4a8b056b700ec4c9552
SHA512

4768d911945315e4426bcbff8a829803856ab72250790da83d6616e19ef038d1389bf19cea31775ce91c3a92022a132d946f9ed32aead77f68817d82bc77ae97
SSDEEP

1536:IsSmeVA9qMVYfgpe0hY58SdtDcM7A2bZPswziicK:Iv+9Ufgp0qSdxcwkwyK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1a2cc366641a6ea83fcaac70fa294d3_JaffaCakes118

Files

a1a2cc366641a6ea83fcaac70fa294d3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

958048bbed0e91e2b83dc081f60a7a58

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetTapeParameters
FatalAppExitA
ResumeThread
InterlockedIncrement
SearchPathW
CreateProcessA
InterlockedDecrement
TlsSetValue
Heap32Next
GetCurrentProcess
GetSystemRegistryQuota
GetThreadSelectorEntry

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 52KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE