a9b3b2d877a45a5b2c0231977c7ed336_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a9b3b2d877a45a5b2c0231977c7ed336_JaffaCakes118
Size

115KB
MD5

a9b3b2d877a45a5b2c0231977c7ed336
SHA1

3decbb2b0645bc08eb0d43c1ddcd80e3a42968cb
SHA256

2a0dfb6ef0ffba61913be0a521367c49e09c60ab47c0d60fe5cb27bd261fd48a
SHA512

32ffa36218d0ffa5427e765dc08a2e6025ad0d2d8802ddf912fbd5058d4fa0e3cad901085637b97e7826e26df6fb474c21a4903cbaa6d4fe3f39da0271cadc0d
SSDEEP

3072:suh0oyD1YUsGWQ+NuqAUcZsb/ip0gwtO2L6:ThdgYUYBIUiFctvG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a9b3b2d877a45a5b2c0231977c7ed336_JaffaCakes118

Files

a9b3b2d877a45a5b2c0231977c7ed336_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e2cfac5e5a27fbba6715a323f7062d8a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFindAtomW
GetLargestConsoleWindowSize
EnumResourceLanguagesA
CopyFileW
GetConsoleOutputCP
HeapQueryInformation
LocalSize
ExitProcess
GetModuleHandleW
OpenFileMappingW
FormatMessageA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 101KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE