014e9b9444796bb4ef5b500bde621f8d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

014e9b9444796bb4ef5b500bde621f8d_JaffaCakes118
Size

61KB
MD5

014e9b9444796bb4ef5b500bde621f8d
SHA1

cb7c2c69f8bc2c298d72874190b82be8659f96f7
SHA256

964baa62f0ac80f0ebb742d93da19f6ebc6359194de9b70e1b04b794ab0cc0be
SHA512

501bc2bf91ed9a46d2063af39792409d42e41cc7f176bc13385caa935bc4148f1a6a8413632815d8736bd7ce53cc975413a9a627a2ff92a50e308e8260b3c7fb
SSDEEP

1536:zuuuuACeUELvJEfJJQ4wYrChOS8YVsr9G8KlZFGeg11A/mu47pJ5:zuuuuACeUEl2JQNht8wu9O/Gw/x45

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
014e9b9444796bb4ef5b500bde621f8d_JaffaCakes118

Files

014e9b9444796bb4ef5b500bde621f8d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bf59737ec860a0870acef69bf7e898ec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VDMOperationStarted
SignalObjectAndWait
GetNamedPipeHandleStateW
TerminateThread
BackupRead
DebugBreakProcess
FindActCtxSectionStringW
SetFileApisToOEM
SetProcessShutdownParameters
GetDriveTypeA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE