f529b820b52d50445b0b7bed7adca346_JaffaCakes118 | Triage

Sharing

General

Target

f529b820b52d50445b0b7bed7adca346_JaffaCakes118
Size

56KB
MD5

f529b820b52d50445b0b7bed7adca346
SHA1

62d7e9d97f250914fe510a6612608c4cf0b751c3
SHA256

afd5c2943f856b675b43d3b61298b0ca03a7f98af1008d3ce1ff68036bae13d3
SHA512

c94d3b4f65869ec786961641d46797ee4dde79ca6bf855e8beea28ef835d856bce137359b2c72d28387bb5c0c4b9a8485e3352d497e3c33a7c66f1c8b1a5cb36
SSDEEP

1536:JedHJ+2zHizHfcZ7xpyDGkFbgbwCfbYuGvtq9n7/:JQpLzHiixpyob01v2b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f529b820b52d50445b0b7bed7adca346_JaffaCakes118

Files

f529b820b52d50445b0b7bed7adca346_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cd07510282a7ddb8590f3b44289669ce

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteVolumeMountPointW
GetThreadLocale
BuildCommDCBA
SetDefaultCommConfigA
SetHandleContext
CreateSemaphoreA
CreateDirectoryExW
GetConsoleAliasExesA
SetSystemPowerState
LocalAlloc
HeapSetInformation

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE