aa2556dbf1f83498c9c882c411eb0211_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa2556dbf1f83498c9c882c411eb0211_JaffaCakes118
Size

67KB
MD5

aa2556dbf1f83498c9c882c411eb0211
SHA1

0e16f345ffc8ad789bc3a15de765189bf9d3300d
SHA256

83e5340f78610c09e4dc5e0d01edf756d82b4e121492153c4890d8e4860e42d4
SHA512

294d2315dc5b87e7c5267ae1a9ef6eb7e16a1dbec58a06cd5f27760d91d8f25722c76e52d37992519d9cf56d68ff25fc4c4ff92d93277bcfe942c242cb0f9d69
SSDEEP

1536:JXWhbzFAleLc5AqKS4/hL+LNh0Y4MeOP2iskAw9w/K:JmhHFAlFhKSWAh0Y4MeOPgw9SK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa2556dbf1f83498c9c882c411eb0211_JaffaCakes118

Files

aa2556dbf1f83498c9c882c411eb0211_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8b3ac0c098865ac3afc84749a1b64ae5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceA
GetSystemRegistryQuota
GetDriveTypeW
_lcreat
UTUnRegister
EnumUILanguagesW
RegisterConsoleVDM
OpenMutexW
VirtualProtectEx
RegisterConsoleVDM
GetSystemDefaultUILanguage

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 52KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE