bb401a9d1fe3c0b1aaffbfee06d5fb6c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb401a9d1fe3c0b1aaffbfee06d5fb6c_JaffaCakes118
Size

63KB
MD5

bb401a9d1fe3c0b1aaffbfee06d5fb6c
SHA1

9f2b185381a996977532985e1fc252d724e6f041
SHA256

aa19607d595eff6520258837cca5fa0e44703604736753965e91e03578f4f675
SHA512

9f945e8ae2123fa734691a736598deb627fc4a83d85d40a2c68450c356bd4002f106f2f7f33e12eecfd3a58a348ca5e4c3ec8e35f4999d6acb734e4dd6dee56a
SSDEEP

1536:W8eslBDXAdjeEOd1WueFSvEErZ1e27lC1JlLgL6UBr8Ub2:djDXAdjeXNgSvEErDXxC1JKRd2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb401a9d1fe3c0b1aaffbfee06d5fb6c_JaffaCakes118

Files

bb401a9d1fe3c0b1aaffbfee06d5fb6c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

12962edcd1a3f3bad571589d96793219

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileApisToOEM
TerminateJobObject
RegisterWaitForSingleObjectEx
GetTempPathA
SetComputerNameExW
GetThreadSelectorEntry
SetConsoleTitleW
GetTimeFormatA
AllocateUserPhysicalPages
IsBadStringPtrA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE