b11346e8d1c2e6c3140faa07af50416c_JaffaCakes118 | Triage

Sharing

General

Target

b11346e8d1c2e6c3140faa07af50416c_JaffaCakes118
Size

56KB
MD5

b11346e8d1c2e6c3140faa07af50416c
SHA1

9385bd1bda402278f51ed2a74d430226c3d4d4b3
SHA256

a95ac1e78fbca25d0900da61ab745df06d3a0d7022b6544e4e4d0e87e46b5d1b
SHA512

d7757e5fcb2956f4f73ea48d69db3d862c369ce0bd98cdfed56217bd257d3e5d0fb03d1b59559076581a8788042e783916b7543c8dcaa8c3cb88a3f12c72254d
SSDEEP

1536:zLjjjIa7IFbND9UvmxT9BYvC1GTOtmqCsVpmvBNVm:GbNGvwYv5TOtmqOFm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b11346e8d1c2e6c3140faa07af50416c_JaffaCakes118

Files

b11346e8d1c2e6c3140faa07af50416c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1f89e882e6709dec5183580267a3b23b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingW
CreateMemoryResourceNotification
lstrcpyn
UnregisterWait
OpenProfileUserMapping
TerminateProcess
SetStdHandle
BackupWrite
ReleaseSemaphore
FindNextFileW
FreeLibrary

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE