d1d18a63cb01bfcdc0e194c3d6584185_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d1d18a63cb01bfcdc0e194c3d6584185_JaffaCakes118
Size

56KB
MD5

d1d18a63cb01bfcdc0e194c3d6584185
SHA1

a6592fefe11cf95284a2f0d164a98e3a76609527
SHA256

3b300e32533b874f79eb71f090f77e06aebf120ddfc3119995a0c025fa96f272
SHA512

ad7d3ff24e7ee1da7c3b3bc65c0cbe740d865c39db954dca36d754cee7d414485f49cfa03d756c880babd6e6f254f8be34e08a0f7695e5afcc0e93690ceba16f
SSDEEP

768:ML/uVGohTYpML83DQSoFPQT1L/32cwgQmZFgL8fsTlCg4frKxYSQ/S0FfBAPIrs1:Mp6ucSFdsTl6fN1aKJAgo+7PRls7HNIQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d1d18a63cb01bfcdc0e194c3d6584185_JaffaCakes118

Files

d1d18a63cb01bfcdc0e194c3d6584185_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dea14f1b745d09cb92cd35394499b2e8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDiskFreeSpaceExW
VirtualProtectEx
MoveFileExW
CreateMailslotW
CreateToolhelp32Snapshot
ReadConsoleA
AllocateUserPhysicalPages
ConnectNamedPipe
EnumerateLocalComputerNamesA
EnumTimeFormatsW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE