aaa2db92052c34934ff95a5599e29b9d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aaa2db92052c34934ff95a5599e29b9d_JaffaCakes118
Size

284KB
MD5

aaa2db92052c34934ff95a5599e29b9d
SHA1

e7ed0e1b8b363b1f5f37d57fbd0d020c784b6cf2
SHA256

5bb63995443564c7f4696ef74961ec5cec2a45eb99065c40b0b7a6bb70f03d86
SHA512

ff23603e86f76367b542dcea88c825c28205d0f6cdc035d8d26f0b2cdc06bc5c07f198aea0458874dbb185baa5298e16896571d66fb13c215b9024181b542432
SSDEEP

6144:b1FQt3eFdZJpITyEB/7vz5Ko3/iUi+3Zex1L9zt:bsWdZJpVEB/Lz5K0/iZ+E1L9z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aaa2db92052c34934ff95a5599e29b9d_JaffaCakes118

Files

aaa2db92052c34934ff95a5599e29b9d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

da479008f35a727d26b62e65e4b6ad0c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

memcpy
memcmp

kernel32

CreateFileA
DisconnectNamedPipe
DuplicateHandle
Sleep
VirtualAlloc
VirtualFree
VirtualProtect
GetProcAddress
LoadLibraryA
GetEnvironmentVariableA
ReleaseMutex
GetUserDefaultLCID
GetFileSize
GetConsoleCP

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 690B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 228KB - Virtual size: 226KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 868B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ