d1998fb7d8a1d1ef16464339fa8da9b2_JaffaCakes118 | Triage

Sharing

General

Target

d1998fb7d8a1d1ef16464339fa8da9b2_JaffaCakes118
Size

131KB
MD5

d1998fb7d8a1d1ef16464339fa8da9b2
SHA1

db1edc649f81d1ff89da2d902e70d8386f524a1f
SHA256

9988953ca0914854a4d4823de425d7abc451956f782ca23384798036fd58c0aa
SHA512

48e6d51938d1859c2c934ac544e6d6d942f70d704519b25bc50504ad1d957f86acd175e13a09b46da12f6813f2350240eea0abf2cd7583a6d0ff1de311fd0c35
SSDEEP

3072:0Mi2ARmhZXFoYMGSXq4CDfOR9eSeRxNaGNQJxTAB7sygnYulXlO6:0Mp8mPdZ6CDOVeZasNQJlXE6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d1998fb7d8a1d1ef16464339fa8da9b2_JaffaCakes118

Files

d1998fb7d8a1d1ef16464339fa8da9b2_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a8a87e3e271a7067ee481918c7a63b29

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
EnumSystemGeoID
HeapAlloc
lstrcmpA
LocalFlags
FindFirstVolumeA
GetLogicalDriveStringsA
CallNamedPipeA
ReplaceFile
GetPrivateProfileStructA
GetLogicalDrives
OpenFileMappingA
GetConsoleScreenBufferInfo
PeekNamedPipe
GetFullPathNameA
FindResourceExW
LZDone
GetProcessHeaps
GetDefaultCommConfigA
VirtualAllocEx

Exports

Exports

Medfktbrh
CloseRjkalpfo
GetVtwydlyyc
Ecdgkplyq
Jttcxdwec
Niheanw
AddTdfqfdlstiu
Ukcobxjjpw
Gohsmsf
Vcjcxgvgv
ClosePkbnoijky
Okamxuepd
Wtylthlgwl
Rnbjabcvdm
SetJwxpvljme
Nbkdecvkvss
OpenUtpacwm
BeginLoqxxex
ReadYdhgcqg
Wmgadbgdh

Sections

.text
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ