a95aa649718f90d6fd3b2481c0b3f282_JaffaCakes118 | Triage

Sharing

General

Target

a95aa649718f90d6fd3b2481c0b3f282_JaffaCakes118
Size

83KB
MD5

a95aa649718f90d6fd3b2481c0b3f282
SHA1

48c3e87cef63f182d177d08e911f581aabc72d5e
SHA256

22900db75508511e30eb30c80c7efaa88781db2a24b34e58f5349db480bb7ceb
SHA512

3731d49911a34b5c88fc8b3a8798b4f43295054905b8420da8295a64d7e442e25b67081cc0ed05b70f5fde25da6567947916184d5e5e2241709c22e70e0132cb
SSDEEP

1536:bssssB5prg/hqxL8rPptojd9ojdMaparhbbBVyOpjVrs2ryrd1vUQuqwcizSkX:bssssBb0sl8Lp2G/oBbBV3Hs2quciu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a95aa649718f90d6fd3b2481c0b3f282_JaffaCakes118

Files

a95aa649718f90d6fd3b2481c0b3f282_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f0615679e007e2e18754f7c94c23f3a8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CommConfigDialogA
TlsGetValue
lstrcat
SetCriticalSectionSpinCount
GetDiskFreeSpaceExA
AllocateUserPhysicalPages
VirtualAllocEx
CancelIo
SystemTimeToTzSpecificLocalTime
AssignProcessToJobObject

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE