bd0e1a3446842fb53e023331a13ce3d0_JaffaCakes118 | Triage

Sharing

General

Target

bd0e1a3446842fb53e023331a13ce3d0_JaffaCakes118
Size

83KB
MD5

bd0e1a3446842fb53e023331a13ce3d0
SHA1

856eb6fae6f693b4d4ea3fafafdf6f7af71a6e3c
SHA256

aac7af32cd91cbebcd821f8aea033002fcbcc7c62724ac8d876396ffba319291
SHA512

a321c73312c1dc355eee033b236aee13160d6d3a22c3c4cb8489c4e47cf6af46e5922aee1ddee8d9d016e10aca6adc75b978686b162caa2529ba1f9bf408d99b
SSDEEP

1536:vrrdQHIzT31EVa7DqhtZ4vjEErxTWDTMqhGKYIZTET8bDQ:viWT3y47DgtZ4vjBkMqhGKZTbbc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd0e1a3446842fb53e023331a13ce3d0_JaffaCakes118

Files

bd0e1a3446842fb53e023331a13ce3d0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1bbe4d96f4f7c29d85834d4ac87bea5b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetThreadPriority
SetConsolePalette
PulseEvent
CreateTimerQueueTimer
FormatMessageW
GetCPFileNameFromRegistry
UnregisterConsoleIME
SetConsoleInputExeNameW
SetCalendarInfoW
SetMailslotInfo
DeleteVolumeMountPointW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE