aa2677c3ea51b7fa278d0f8d584d6ba3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa2677c3ea51b7fa278d0f8d584d6ba3_JaffaCakes118
Size

101KB
MD5

aa2677c3ea51b7fa278d0f8d584d6ba3
SHA1

56b2514cbff33ef85727bae7899b9cbc9a7f41ec
SHA256

d807b8a559878355525b42a8e77e6861249e78255fd5ef560a76bf7dc6d733ad
SHA512

9997c0d45a848e0d0fc2b26ac4b8921ef41263053165b9a013aa97a1df4f7727e123ae5ecd63df2bb9cef92ea33780e102832bd47460ebfa4938cf17b142d25a
SSDEEP

1536:s+VeNfKCIaFFwphrIWv8/2znFBk5b93QAH+s20mRuYWV4yP10pY4kDlqjboYYUn5:s++KwFUvJTQd937eluYW31efZnETbk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa2677c3ea51b7fa278d0f8d584d6ba3_JaffaCakes118

Files

aa2677c3ea51b7fa278d0f8d584d6ba3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0e415988d81bde52d4c6d5135b474e0f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventW
DefineDosDeviceW
VirtualProtect

shell32

CheckEscapesW
StrRChrIW
DragAcceptFiles

Sections

.text
Size: 42KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ