aca60e382c5daf9912cd2165737cdb14_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aca60e382c5daf9912cd2165737cdb14_JaffaCakes118
Size

66KB
MD5

aca60e382c5daf9912cd2165737cdb14
SHA1

965c883a1facf24e06104760e096af5022a6de5d
SHA256

36dd484195f7834aa849d91f51520e3938a470f690b034451fb595e89ee42690
SHA512

f07bddfe5f8326be13e7e67ee894f32d0aa73e75f86dc3316ab06e924b0ee34b786a3bcd02d244b56c1b13298df28155237297ea05841a881d99d3c0b9831694
SSDEEP

1536:6fcvQzMQ20j/voPHF4FDVunm1zH0s+WvcjUIe1VlVsQNXY8:6fcHpPHFiVuczHkjCl/X1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aca60e382c5daf9912cd2165737cdb14_JaffaCakes118

Files

aca60e382c5daf9912cd2165737cdb14_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6d227647c74e62da4734de36b0e89717

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapQueryInformation
GetExitCodeProcess
ReplaceFile
GlobalLock
SetConsolePalette
DeleteFileA
SetSystemTime
EnterCriticalSection
LZOpenFileW
OpenThread
CreateJobObjectW
AddRefActCtx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE