b075da43954319a486b6392f48f86566_JaffaCakes118 | Triage

Sharing

General

Target

b075da43954319a486b6392f48f86566_JaffaCakes118
Size

83KB
MD5

b075da43954319a486b6392f48f86566
SHA1

50e598f8333c8e01ced84e66fba5e777ec7a53b6
SHA256

908e93733c8c30531ed24beb6a9369094e02a77da0f71841734b7d95b17699c8
SHA512

5e0e816be51cf69db26048d6bca5b3174bf5c787239db0788bc1798a8930eb4a0d0f671d71d08cc7bd9dc8b08d3b9aa4f549aff60c9b00ce73c5360606f4ba78
SSDEEP

1536:lG+cqScB69+DrJzC/lsk5W0XddK+0+IFRO2jEErxTWDTMqhGKYIZTET8bDQ:UtcBQyruN/tGrjBkMqhGKZTbbc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b075da43954319a486b6392f48f86566_JaffaCakes118

Files

b075da43954319a486b6392f48f86566_JaffaCakes118
.exe windows:4 windows x86 arch:x86

be718f9ca4fafb52a3b66214e8095cf8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVolumeInformationA
OpenSemaphoreA
IsBadWritePtr
CreateActCtxA
GetVolumeInformationW
ExpandEnvironmentStringsW
EnumResourceTypesW
GetProcessIoCounters
SetLocaleInfoW
GetConsoleSelectionInfo

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE