a223d58f3326a861aff5cd39e37135b1_JaffaCakes118 | Triage

Sharing

General

Target

a223d58f3326a861aff5cd39e37135b1_JaffaCakes118
Size

83KB
MD5

a223d58f3326a861aff5cd39e37135b1
SHA1

b53f1c4983efd7502c5130db8fef0bf531d0283f
SHA256

22004fc1c9852ac07a08f88ada8337001233a7c867ab69d513c3b70971ee7974
SHA512

747dd09bf77a8a5441473a56985b0abad5a88112c83b11fa782c5687f55ff5fdab5afc58b175737e9e13185ad8fcbcd07abc7be2670f07304d39c00bd3fbab02
SSDEEP

1536:qvKqDp/AF2rGvD4CYX1IKvfeJPvQToujEErxTWDTMqhGKYIZTET8bDQ:w1/A6JCYX1zoPvIjBkMqhGKZTbbc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a223d58f3326a861aff5cd39e37135b1_JaffaCakes118

Files

a223d58f3326a861aff5cd39e37135b1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

205b6f0e94932aa97ff3560638a2a844

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareStringW
DuplicateHandle
AssignProcessToJobObject
IsValidLanguageGroup
UpdateResourceW
SetCurrentDirectoryA
WaitCommEvent
GetStringTypeExA
GetDiskFreeSpaceExA
InterlockedExchangeAdd
GlobalWire

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE