bf2aa7c3b4a51fda8b1d55fea3f5cc7f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf2aa7c3b4a51fda8b1d55fea3f5cc7f_JaffaCakes118
Size

56KB
MD5

bf2aa7c3b4a51fda8b1d55fea3f5cc7f
SHA1

61a3fd290c34bdae1fe15220aab249db54008e43
SHA256

a5d0cc23f15b86348a4376a7f7174648eaa2860e270174b644ef705b70e11c1e
SHA512

2e0ead724f259d1e78119ceff5fd376947dd18b0c7ffe0e22fc389d81a039e3addf37039683ebc392a76e8d0073fd512fe3cf8eed31465dbb551cec247a237a8
SSDEEP

1536:On59aqeqxLcKjxafCCqrSJWe3UfMmwBHxVTFZ2j:O59axqxHGCTr+WyUfMxBVZ2j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf2aa7c3b4a51fda8b1d55fea3f5cc7f_JaffaCakes118

Files

bf2aa7c3b4a51fda8b1d55fea3f5cc7f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

414e2d3253ab0a049d2ea7a28c95ce54

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetShortPathNameW
GetDefaultCommConfigW
ResumeThread
EnumSystemGeoID
QueryMemoryResourceNotification
SetFirmwareEnvironmentVariableW
ReplaceFileW
CopyLZFile
WaitNamedPipeW
InterlockedPushEntrySList

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE