adeb5c77b35976a6c816138436f668c5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

adeb5c77b35976a6c816138436f668c5_JaffaCakes118
Size

63KB
MD5

adeb5c77b35976a6c816138436f668c5
SHA1

a4696de357629559d0d544e49008b6bbca60c1ef
SHA256

cac53dd2c1be2198ff43c13719c492d83441091197dafc56922d82e32698b319
SHA512

e784f9e8011205a93e6a6df20cbd2f33894443a41ed4c3d6071b169406c0564d7975d762eeb304b92f68ffc5af635823b4d3d56a271cf31b666ac3c6fd217f37
SSDEEP

1536:ZCXxtB8huM9nsSLgFxeYko7m8uRQxauPCH6PABs:sXxtouM9nsSL+xe+7m8umx37IBs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
adeb5c77b35976a6c816138436f668c5_JaffaCakes118

Files

adeb5c77b35976a6c816138436f668c5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3882cc5f6da0a5fd0f94d623c8669f46

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetWaitableTimer
SetConsoleCP
CopyFileW
OutputDebugStringW
DelayLoadFailureHook
FindNextVolumeA
ExitThread
GlobalFindAtomW
SetLocaleInfoW
GetProfileStringA
GetSystemRegistryQuota
CheckRemoteDebuggerPresent

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE