b8d361a9143205778bb08c1d8e3d3cdb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8d361a9143205778bb08c1d8e3d3cdb_JaffaCakes118
Size

252KB
MD5

b8d361a9143205778bb08c1d8e3d3cdb
SHA1

d2f00b6208e1bcdedd24c7c2f8d32a029853e969
SHA256

e2ee652a639b2a10295babd0ebd14d1420ecad86850994f6e4aacc0d7a792b40
SHA512

484a96f02b8866238236be748d0716ff054120808cc3a41988f65c600c802ceb20fbee88bd7dc5d62ef1104eb326dfde45d0800b0ce0472cae6769a116ee0bbc
SSDEEP

6144:c9G3B0a62PUrTIKduIQP4Es/F2SqyBU3qA659ml0U2d7BndMZ/b6:TBWrcKdgP45wuc63OGdBqZ6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8d361a9143205778bb08c1d8e3d3cdb_JaffaCakes118

Files

b8d361a9143205778bb08c1d8e3d3cdb_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c75a6d4dc2c628a968fe78aabd2169cb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalReAlloc
GetDiskFreeSpaceExW
lstrcmpiA
CreateSemaphoreA
InterlockedDecrement
GetStringTypeExA
FindNextFileW

Sections

.text
Size: 236KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

p4ofixlv
Size: 751B - Virtual size: 118KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ