a4078d1769044a0f6bf7c8049c3be269_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a4078d1769044a0f6bf7c8049c3be269_JaffaCakes118
Size

91KB
MD5

a4078d1769044a0f6bf7c8049c3be269
SHA1

adef13f8d4c061432648194e162611f9846e08df
SHA256

783194ee72ba2641171eca3694b3768440e817e92c13b5e89bfbba631c8bbd70
SHA512

6a76d2da4a8baef692fde22d521bb98ddc11ca6e2aa248c540309a20060a76d7c45c8ff8c6b8956a212b108270f5f0ae4f15a450ae61bb95b4bd317596821cd4
SSDEEP

1536:43wpm/Z9WSQVws6Mlfr0tzjHko/UrndwfhsRBBUd8EFtXwyxM3zoj40PWU7m:4Q6B+r0zP8DUGRI7Ixk00Po

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a4078d1769044a0f6bf7c8049c3be269_JaffaCakes118

Files

a4078d1769044a0f6bf7c8049c3be269_JaffaCakes118
.exe windows:4 windows x86 arch:x86

29522cbeb5e06192833c7a5aec99b762

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFree
CmdBatNotification
CreateFileMappingA
FreeEnvironmentStringsA
GlobalFindAtomA
GlobalWire
ClearCommBreak
OpenThread
IsBadHugeWritePtr
CreateThread
GetTimeZoneInformation
GlobalLock

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 77KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE