b37b22fd29c2ccc9037012d9b7137544_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b37b22fd29c2ccc9037012d9b7137544_JaffaCakes118
Size

104KB
MD5

b37b22fd29c2ccc9037012d9b7137544
SHA1

c42d1f52b3ed7ce1b432b1e1ab1d12d12917a705
SHA256

c45b54861d0f193e3a46d9b1531cb494f94749799ce83fa344ad77c3d6bd0dfe
SHA512

0320b8af10188c384eb6046ed6d9fdce4570eb0c9dc64e33e4a47e17c841e7bb72141ce1b4ee26e3e0098d2f55bc6bff2e785b86ed783cae4be7773a65585d28
SSDEEP

3072:leigTz4yQPgLwUESScREQZ6gxnQDZ8joET0F:leiqzWPnUhShZ9Oi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b37b22fd29c2ccc9037012d9b7137544_JaffaCakes118

Files

b37b22fd29c2ccc9037012d9b7137544_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3f1f6c5f13dd1f91e249152045152de3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenEventW
GetShortPathNameA
DuplicateHandle
SetComputerNameA
GetSystemRegistryQuota
LocalFree
DisconnectNamedPipe
GetHandleContext
CreateTimerQueueTimer
PurgeComm
InterlockedPopEntrySList

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE