a99538958e414cb5c47133535ce9a36d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a99538958e414cb5c47133535ce9a36d_JaffaCakes118
Size

76KB
MD5

a99538958e414cb5c47133535ce9a36d
SHA1

3dc8a8abc0f36b1f658418556361928b5843b304
SHA256

ab08e30c566666594546ec90edc03397cf198f2d9c438290d489e24ec11c3498
SHA512

1a338eefde979d2144d81ba51e5a04c8ebb9900c257c130d74a3c14c3e373eb81bf8ca200c43d49681a31b6bbc23963a73f3806e5252e2df6d3902c36a60035f
SSDEEP

1536:Ve0ZbM3pDk2n+mTr2RW5S+FGTr7pjVrs2ryrd1vUQuq6:VlZCDk2+mTr24/FGTXHs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a99538958e414cb5c47133535ce9a36d_JaffaCakes118

Files

a99538958e414cb5c47133535ce9a36d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a6050f2c1e56ee41c575564bd72b9046

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCursorInfo
WritePrivateProfileSectionA
GetModuleFileNameA
InterlockedExchangeAdd
WaitForMultipleObjects
WritePrivateProfileStringA
QueueUserAPC
BaseInitAppcompatCacheSupport
FindFirstFileExA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE