f51e799147e471179de8a9ff25887d8a_JaffaCakes118 | Triage

Sharing

General

Target

f51e799147e471179de8a9ff25887d8a_JaffaCakes118
Size

76KB
MD5

f51e799147e471179de8a9ff25887d8a
SHA1

02bd73710383311d2de84ad5064ead4a9b966b32
SHA256

a4800dc50d54867bcdb6383d4079cfa0abf1a94a6649cfb620fdd0c6cac3a660
SHA512

5ad5186bb6557f0e24f01928bf3c2915c399a78d782888151b5801684bda0d57d4a5f156c394c210d41833767007ba4d67a1baedd764a479fbe82104eb8578e6
SSDEEP

1536:rQvQBPzs7zCCwCNPGa2mf1PpjVrs2ryrd1vUQuq6:HpzYu/CNptPHs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f51e799147e471179de8a9ff25887d8a_JaffaCakes118

Files

f51e799147e471179de8a9ff25887d8a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

72d8d44ad8ff6ed9ed05053afd3136c2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UTRegister
CopyFileA
InitializeCriticalSection
GetModuleHandleExA
GetSystemDefaultLangID
GetBinaryTypeA
RestoreLastError
GetConsoleHardwareState
GetVolumeInformationA
BindIoCompletionCallback

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE