c884dd97d38db27af57661a740f0d973_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c884dd97d38db27af57661a740f0d973_JaffaCakes118
Size

83KB
MD5

c884dd97d38db27af57661a740f0d973
SHA1

aa44485f4aceda120efa776f46ecbf7b0af1b9a0
SHA256

35d99086b822631ccda6ed965207f718ece48c37cfa4ad3f70fdf07fc5522805
SHA512

9e0240b0a7407480997da41a67e47060f217defed3fc0f02d744a86fca44f8aecb85688bcda3e3a6b1ee6414ca6f098d79fbf89a2a5c3f0ba7f8179cd3ed6aba
SSDEEP

1536:Q2HlUFMs8zmn5KtpkyAlFgdBcy1H/QEBgjEErxTWDTMqhGKYIZTET8bDQ:tHOMs8JkflF+14AgjBkMqhGKZTbbc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c884dd97d38db27af57661a740f0d973_JaffaCakes118

Files

c884dd97d38db27af57661a740f0d973_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e9c0c86ea3a03ed2e13a78c23254ffdd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetHandleCount
SetHandleContext
GetFirmwareEnvironmentVariableW
GetVersionExA
GetCommConfig
GetSystemDirectoryA
SetConsoleNlsMode
LoadResource
lstrcmpW
DeviceIoControl
GetPrivateProfileSectionW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE