d2b0f1598b4803b17a23cfdc07b2bff2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d2b0f1598b4803b17a23cfdc07b2bff2_JaffaCakes118
Size

63KB
MD5

d2b0f1598b4803b17a23cfdc07b2bff2
SHA1

132b29fd55e18f91f3773759f16ceaa27089be9b
SHA256

11df0c664e23cc7da1108379c408a1e81c49f1e7aecb3119e52b70e34fcb5070
SHA512

d15caac4df16faadcd212eb1aae5766b447c2ae85d397c424dd5fd8719f4069ebabdef3c4ef0af66d64050c77330b9c7fad9d42a09eb561f499ed33e188e72ac
SSDEEP

1536:Thyl1uGrXp/Fp/3w6g7rofTjNqBL+hlQm:TOuk/AF7EHEix

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d2b0f1598b4803b17a23cfdc07b2bff2_JaffaCakes118

Files

d2b0f1598b4803b17a23cfdc07b2bff2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

af2ce8c45990e0188990444a05e2f2a9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateHardLinkW
WaitForMultipleObjects
InterlockedCompareExchange
GetFileSizeEx
FreeUserPhysicalPages
CloseHandle
CreateTimerQueue
ReadConsoleInputExA
DelayLoadFailureHook
SetThreadAffinityMask

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE