cdded5732ca524b107e088b4536a2ba7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cdded5732ca524b107e088b4536a2ba7_JaffaCakes118
Size

56KB
MD5

cdded5732ca524b107e088b4536a2ba7
SHA1

0aae032a5a1ac9d9ec313e42a6f1747b81cca5b5
SHA256

8beaa13833dbc13c1564adf1a6416a6c5088b903999f5612490511b381ea96d4
SHA512

8283fa048b83f5d20f08ff45573b8ce0dee7ee4aa4f321a60b3c7891d07e1add96ab0bbb96ab09250ef7f4d2e2b1e0d2cd481d8699ea23a1ecd83300386f6893
SSDEEP

1536:O+hsLAUPWsGQJqCXcA37G1KEQh0LqevwkTQ3:O+KjGQXXfG0LCVvw/3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cdded5732ca524b107e088b4536a2ba7_JaffaCakes118

Files

cdded5732ca524b107e088b4536a2ba7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bdf92c19f9fea23c7e3ed48659c08963

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DnsHostnameToComputerNameA
HeapLock
HeapUnlock
PostQueuedCompletionStatus
GetProcessHeap
lstrcat
QueueUserAPC
GetSystemTimeAdjustment
FillConsoleOutputAttribute
WaitForMultipleObjectsEx
DeleteFileA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE