b34aed762875d8fcdc6486fb52793f29_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b34aed762875d8fcdc6486fb52793f29_JaffaCakes118
Size

66KB
MD5

b34aed762875d8fcdc6486fb52793f29
SHA1

fc79a44032953ecd82a60b0784bbd9669d139956
SHA256

dc99fd07fdad8926c9589982b6bad4e8678ce4eacfe03b3abbbd32b1ffa57157
SHA512

f30f289937d01fdcdf20b5c24f9d096e2605a0fafa142f0bbccd4aaa2ed650132e23809111b74a2200d3508a25f91c79ada6b67a67aba057de45c57424c0d425
SSDEEP

1536:O0Z+BhtBh4rm2MhrT1nzo1BJalI3l5LiKC09KBmv8rDzRCL:q1UL++lZhCCKBmv+DzRW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b34aed762875d8fcdc6486fb52793f29_JaffaCakes118

Files

b34aed762875d8fcdc6486fb52793f29_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f69abc3ed40e158f4d08e3a5f5fdd049

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapSummary
CreateFileW
SetEnvironmentVariableW
SetDllDirectoryW
GetVDMCurrentDirectories
GetSystemDirectoryW
CreateMutexW
EnumUILanguagesA
GetThreadPriorityBoost
CreateProcessA
SetConsoleNlsMode

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE