db4f7414c2cc3afb1d27895a11556253_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

db4f7414c2cc3afb1d27895a11556253_JaffaCakes118
Size

63KB
MD5

db4f7414c2cc3afb1d27895a11556253
SHA1

22077fb2f0091a107d2441c111386fa9983cf4f3
SHA256

8bb107647c5f7a1a62d8367da760a5be62b2d0100890dbeeadab4d28f4cf578f
SHA512

a15a04a9975bf482c4c5c738baa8ab5439a6a03bc5460187f25b6a1b1b97eb7f9e2eab2d0d2f521bc74b7d612abae5bb0e740e21b84a7c1c695813d95ec9d2ca
SSDEEP

1536:xG2PX+uEvbE2LBUbgCj+yOlhybGxe73q7e4I+SoGEWh:xdEv4214gi+p3ZxK3ItSPh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db4f7414c2cc3afb1d27895a11556253_JaffaCakes118

Files

db4f7414c2cc3afb1d27895a11556253_JaffaCakes118
.exe windows:4 windows x86 arch:x86

15c47955290f3c009e7af82274dc628c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetNumaProcessorNode
LCMapStringA
BaseInitAppcompatCache
GetVolumePathNamesForVolumeNameW
CreateJobObjectW
GetWindowsDirectoryW
GetCommModemStatus
FindFirstFileW
LocalFlags
HeapCreate
WriteConsoleOutputAttribute

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE