bb812d84588d1cc50fdde0939e2cb79c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb812d84588d1cc50fdde0939e2cb79c_JaffaCakes118
Size

83KB
MD5

bb812d84588d1cc50fdde0939e2cb79c
SHA1

9c6a07ce368ae274781c93542e668f4bbdde8b04
SHA256

810fd058b37c78a9094de566845deefb067fefe5728a45873caf3797c48af6b4
SHA512

a125be5dbf684844ad1633ce1c5c6f31bbcc4c140741dea8dd6c93e313a1ae9eb2234bb40eb31154951d929a58620a95b7e110573d8cbf6adc01c0e3b4b1d032
SSDEEP

1536:OOOmvb+YYeSrPYlP1VH2FKYrXLok9rgP2xmj1jEErxTWDTMqhGKYIZTET8bDQ:FOqb5YPglPPVGXLltS2xmZjBkMqhGKZg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb812d84588d1cc50fdde0939e2cb79c_JaffaCakes118

Files

bb812d84588d1cc50fdde0939e2cb79c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

12c8d2b8d69108a58f083dd5a87bc2d4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteTimerQueue
GetCurrentThreadId
QueryDosDeviceA
BaseFlushAppcompatCache
GetConsoleWindow
CreateWaitableTimerW
SetThreadUILanguage
GetCurrentThread
SetCommBreak
BuildCommDCBAndTimeoutsA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE