a9cf0282de33fb7133a0c0ae529c4435_JaffaCakes118 | Triage

Sharing

General

Target

a9cf0282de33fb7133a0c0ae529c4435_JaffaCakes118
Size

83KB
MD5

a9cf0282de33fb7133a0c0ae529c4435
SHA1

90d510e70b11ead508a9e85a4fee2dc69d1a6d0e
SHA256

d96f7fc51dd3bb0892f0c7a175c8b985b5d0e19bf5d29cbf0b6db0560144aa2f
SHA512

0db279b72bac4b6f896500fec7d86729f0137822e7c4aac936dac83ba7202c53d45911fce326029ac63780a875ffa32ab5f572609b9e0dd9015ff6b06408d5dc
SSDEEP

1536:iBEOEOEOEOHIHbFKstpR8GnfJ6zEZXV8BiEdFNYrPE6BngSb9jEErxTWDTMqhGK6:imzzzWSFtQGnEzQVmdFOriSRjBkMqhGZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a9cf0282de33fb7133a0c0ae529c4435_JaffaCakes118

Files

a9cf0282de33fb7133a0c0ae529c4435_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4cb2740f68902b9cd31f330be30391c3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstVolumeMountPointA
FillConsoleOutputCharacterW
GetThreadIOPendingFlag
SetLocaleInfoW
ExpandEnvironmentStringsA
GetUserDefaultLangID
CreateMemoryResourceNotification
RtlZeroMemory
TerminateJobObject

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE