f07aa294abe930444ead9d2ddc5ce892_JaffaCakes118 | Triage

Sharing

General

Target

f07aa294abe930444ead9d2ddc5ce892_JaffaCakes118
Size

294KB
MD5

f07aa294abe930444ead9d2ddc5ce892
SHA1

8f566a5454f0a26d280f2180201da8c58d80c6ef
SHA256

58477e7cd7927280c8ebdede614c1165d45f9c527bfe36dad1726795490182e6
SHA512

f8589cf332ce761154a7e75bdd7d7865ae5691703c8bcd52adfb8e66c299dcb644f85adc04a23602db3eec0461b20dc72354d26d274d51952747f1e0935d9f05
SSDEEP

6144:jvd/T0yclCtPRTN6W58v6CayhpXZTTIMbhnEdfcr79O:jF70HstpTNMvG2ppT9JwfcNO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f07aa294abe930444ead9d2ddc5ce892_JaffaCakes118

Files

f07aa294abe930444ead9d2ddc5ce892_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2717a120f3532759192746b08a75beea

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
VirtualAlloc
VirtualFree
VirtualProtect
LoadLibraryA
GetProcAddress
CreateFileA
WriteFile
GetEnvironmentVariableW

Sections

.text
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 324B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 218KB - Virtual size: 218KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE