a7a1f20aa008db1fedd0869c30a5340c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a7a1f20aa008db1fedd0869c30a5340c_JaffaCakes118
Size

61KB
MD5

a7a1f20aa008db1fedd0869c30a5340c
SHA1

d93d18f2e721b0fede3c46b56a9f7f71cb4774fc
SHA256

3b1aa648aeb9ce364a38532b6bc64ff95fe7d05776d79abe0f6672a5b0a99d3c
SHA512

4cf005c19fe53e6231238d5956bea1d0427d6cd012c9d102e259a90b74d359614ea12066964efef7f7acc6238059bbf957678690d4105c45d74c07f0555ec7d2
SSDEEP

1536:VExi8Y7g4pVYK2BWil1O7C22k9iS6GP+eB8ATHVeCa:SxK7rTGBIWgiSrPjTXa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a7a1f20aa008db1fedd0869c30a5340c_JaffaCakes118

Files

a7a1f20aa008db1fedd0869c30a5340c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e2551865aceb8213be89c9a06d329090

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

_hread
BuildCommDCBW
PulseEvent
_llseek
GetCurrentDirectoryA
CreateThread
OpenJobObjectA
WritePrivateProfileStructW
RaiseException
SetEnvironmentVariableA
CreateMutexA
GetCommState

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE