dd9020d3d7793eeb46473d36ff073eab_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd9020d3d7793eeb46473d36ff073eab_JaffaCakes118
Size

76KB
MD5

dd9020d3d7793eeb46473d36ff073eab
SHA1

09f85b8bcfff29bdc747fc5087190ae4277970ed
SHA256

0f53c5eea4b8ea8f8d4d48c827d83e1ad356adc38046e86cc8ec812b33a2746b
SHA512

07b11ffc9b4264513c4d312233d3e2abb81249ba206d8a803041cd5ab7d6b10d9fe2aa8a9856d42792284f34bd682c589b570ad06839b88f09a88bee6eaeafc4
SSDEEP

1536:2WElElElElEzz0Pqv6F6p4sK3QfWcVu2i/2fnHKrjSDOu7QJwb4s5oy616ayQgg7:272222yuyP/AUaLXZD0lRZss/6yV/l3T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd9020d3d7793eeb46473d36ff073eab_JaffaCakes118

Files

dd9020d3d7793eeb46473d36ff073eab_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9119b43750485ab45b97dfb21126ec74

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReplaceFile
DebugActiveProcess
CreateMailslotW
GetExitCodeThread
ResumeThread
GetEnvironmentStrings
CreateDirectoryExA
GetConsoleMode
EnumDateFormatsW
LZRead
RegisterWaitForSingleObjectEx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE