ad4ae1199651b33224b798a5ea7f766d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad4ae1199651b33224b798a5ea7f766d_JaffaCakes118
Size

86KB
MD5

ad4ae1199651b33224b798a5ea7f766d
SHA1

bdbaf64d02bd5f7879de72fc60a25d94ef8840e3
SHA256

b1d5fda0542f5ba4047347f688d74cdeaa8f0a831de245ddbb6bf1fa91c46f11
SHA512

8846fad0a35a57d59e7230e99688bd4916c6a2a2923f997e73d8c3a0bcac35b2675d048bc11cd9f362bcb4f442db77af570bbcd8e007536fdb79924ef9ab8754
SSDEEP

1536:R7BjSxsp1YjYOUJLpYfaWA2k4JppcNf1BnJNP7dcf7T61s5Varlj:VXYjYOsLb52XaNf1Njdw7T2cVarlj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad4ae1199651b33224b798a5ea7f766d_JaffaCakes118

Files

ad4ae1199651b33224b798a5ea7f766d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7891dd45fa569bd8f294901264446122

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetStdHandle
SearchPathA
UnmapViewOfFile
FoldStringA
DeleteTimerQueueEx
GetCommConfig
EnumSystemLocalesA
GetNativeSystemInfo
PostQueuedCompletionStatus
QueryDosDeviceW
LockResource
GetFileAttributesExW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xrdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE