ddfa8231910dd2db3603bddd2653aa0c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ddfa8231910dd2db3603bddd2653aa0c_JaffaCakes118
Size

56KB
MD5

ddfa8231910dd2db3603bddd2653aa0c
SHA1

023ad6e7850bd8b93330580b2dd5861b024e6425
SHA256

45b0802c0639e2d77600aff5602576ee58f71b2e7adaa274af46e60d8b3f3a82
SHA512

fb6ddbb0f175134311d7fbdada157b0e90172fe06a6e64b512f0acdfcdcc999cd2526086b9ad0e9a5114080c802a9c4ea0f7fcf53251d2c22b1fe2a220af997f
SSDEEP

1536:0XBpg5Cvp7wDHdKXqjmaWBce2eOHhKBxxG9:0bg5CR4o8ma4ShOLG9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ddfa8231910dd2db3603bddd2653aa0c_JaffaCakes118

Files

ddfa8231910dd2db3603bddd2653aa0c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a2335b82bd808f87e43b8d7175df99c3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetThreadPriorityBoost
GetNamedPipeHandleStateA
BaseCleanupAppcompatCacheSupport
lstrcpyn
HeapLock
GetConsoleAliasA
GetDevicePowerState
SetConsoleMaximumWindowSize
LockResource
SetEvent
IsBadHugeWritePtr

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE