dd35a44a41cee79ef51b23096d57721e_JaffaCakes118 | Triage

Sharing

General

Target

dd35a44a41cee79ef51b23096d57721e_JaffaCakes118
Size

83KB
MD5

dd35a44a41cee79ef51b23096d57721e
SHA1

37659476c466a2c6eaf98e2b8f1ec8d026031728
SHA256

84f402661bf8aad9c572556bb8d02df2833b5b7886afb65e960fdcc5301ad792
SHA512

4a663bda5cc099f517bd8cd1f97e120466947e9807547d10e8a28773953f946c40880a40ba44e0fc6dddc8c3abaa9e09491c244fb4ad88a248a917f6f67e4a4f
SSDEEP

1536:hRvKD1baAvFRrefTFgcrK/or0/OFmdAS7TpjVrs2ryrd1vUQuq3QXiY:hRvKDsCeRgHScucTHs2qNQXiY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd35a44a41cee79ef51b23096d57721e_JaffaCakes118

Files

dd35a44a41cee79ef51b23096d57721e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7d9e57240b8d502a70ead5164152b805

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnregisterConsoleIME
IsBadHugeReadPtr
CopyFileExA
GetNamedPipeHandleStateW
GetFullPathNameA
GetProfileSectionA
LocalShrink
FreeEnvironmentStringsW
GetOverlappedResult
SetEvent
MultiByteToWideChar

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE