abe89c72515a664703c06cbf41ac8d11_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

abe89c72515a664703c06cbf41ac8d11_JaffaCakes118
Size

249KB
MD5

abe89c72515a664703c06cbf41ac8d11
SHA1

2263e6ad5fdf4e49130fc5d7db565925bddd3d1d
SHA256

e83f0d740440ca29b0b295e745d5c48f28343cc3532e5638f05f1d49027a88a5
SHA512

4c917abb1861df28cd5a1035a211ba1004a7d179be4fbd9cadd34b434bbe308aed499aa1893f5d7c1dd5fdc872056116c28729b986eec0765f6910c330ae5ad2
SSDEEP

6144:rKAaYpmknpqEA5tWLk6ugytBlr5VXXZ9/zczHVp/kMmF5:rKPKphgtqk6ugytzrXXZ97crkMmF5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
abe89c72515a664703c06cbf41ac8d11_JaffaCakes118

Files

abe89c72515a664703c06cbf41ac8d11_JaffaCakes118
.exe windows:3 windows x86 arch:x86

94372d66625fe76b1091352853ab08c4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetStdHandle
GetTickCount
LocalFree
SetStdHandle
VirtualFree
VirtualAlloc
CloseHandle
GetStartupInfoW

Sections

.text
Size: 171KB - Virtual size: 171KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 572KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ