acbeb38a5fda6c691764128b97cfe0f4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

acbeb38a5fda6c691764128b97cfe0f4_JaffaCakes118
Size

67KB
MD5

acbeb38a5fda6c691764128b97cfe0f4
SHA1

cc68212479e0a91a3b8cc12681e0ad3d0baffc0c
SHA256

c56f8276b0919e002505c4b798c5e96f1a5bf13797e12eb016f6240384b76079
SHA512

9bc580b97cb03bddf922b7c0e5d783b98ff993a1a6b0450c060d1370dbef9b69263230de1ed0739a17fd1709ecfb4857b971410227a8b92a44f7cfc50eceb65f
SSDEEP

1536:OqE+/EgCl7JVLUUXfiNA2kTWNgOIrfh6gdK:QnzDXigTW2rPK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
acbeb38a5fda6c691764128b97cfe0f4_JaffaCakes118

Files

acbeb38a5fda6c691764128b97cfe0f4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

89cb41c53958aab370c13870f1c3f554

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumTimeFormatsW
LZDone
GetProcessIoCounters
FindActCtxSectionGuid
CallNamedPipeW
CreateFileMappingW
CreateTimerQueue
InitAtomTable
RtlUnwind
ReadDirectoryChangesW
SetConsolePalette

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 52KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE