b12d16e9861cb2879cfcdb6abf57cd3d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b12d16e9861cb2879cfcdb6abf57cd3d_JaffaCakes118
Size

62KB
MD5

b12d16e9861cb2879cfcdb6abf57cd3d
SHA1

4ea00cbab863ba19936c01017b252fa8e9abec0c
SHA256

badf69fc87d213f1c02ddc7490e231d805e4e9fdf36c2f22e90086a3c5120b39
SHA512

472229f048cefb756310e5f0e8a1a7a7fde85a95176401afd7f1f5ba9f1c3a17ef3b69dba33c3de5d0ffa33c2bc90d833ca3c906f1bb99f47edb34de4be7962d
SSDEEP

1536:pywrWtSTU47wtB4KP1y7f0qnvhafqPJEYGd5jYoXeBC9rZ:py7VuwtBlPqLnvuQJ7GdmPWZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b12d16e9861cb2879cfcdb6abf57cd3d_JaffaCakes118

Files

b12d16e9861cb2879cfcdb6abf57cd3d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

14dc86395dc9314f368403a370a32da2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetNativeSystemInfo
GetBinaryType
GetProcessDEPPolicy
GetEnvironmentStrings
FreeLibrary
VirtualFree
DeviceIoControl
FindFirstFileExA
ReadConsoleInputW
GetBinaryType
SizeofResource
Process32FirstW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE