a6477021f7bb94cbd51b2d7d7ed971b8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a6477021f7bb94cbd51b2d7d7ed971b8_JaffaCakes118
Size

63KB
MD5

a6477021f7bb94cbd51b2d7d7ed971b8
SHA1

aca20aeed2c8f52a7f077e01ba9986e367dd580a
SHA256

5b69e69e910f9e5a6e5c7beb4a1e1a4d769e1940f03aa3482f755ffb8d60fb5a
SHA512

4388b54ba04b86677ae178b96bc8afe74939304e426c1ba29971b89eae953a1ab15607fdf24b721da04c5936704cd957971ca1bb8a57a2bca0cf36068a929787
SSDEEP

1536:vPokXXzfarNzzob84/SjT6uPJp8WlP5A9JIj6t9PqMO:HrXurNzzob84/kTlNl2aj0yMO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a6477021f7bb94cbd51b2d7d7ed971b8_JaffaCakes118

Files

a6477021f7bb94cbd51b2d7d7ed971b8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

342d41117eca98b3cfa521a0d7082dc6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
SetComPlusPackageInstallStatus
DuplicateHandle
GetVolumePathNameW
GetOverlappedResult
lstrcmpiW
GetPrivateProfileIntA
SetLastError
CopyFileA
VDMConsoleOperation
SetLocaleInfoA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE