03e4ac8942566b566cbbb9af18a2d56a_JaffaCakes118 | Triage

Sharing

General

Target

03e4ac8942566b566cbbb9af18a2d56a_JaffaCakes118
Size

115KB
MD5

03e4ac8942566b566cbbb9af18a2d56a
SHA1

111c96cb5352a0a65e9b1363fa01bb42210ad9ca
SHA256

6a1b9bbd66c6e44541e3ff284389fb12b7797860285941dec762115d4cbafee9
SHA512

1ee269eeb5d8b21aefbd92c5fc3b43380997d43e543b0100acd4552b5ced52392a93e5389c22c5d576f0d8f9c048327075c2e97c6d418fdad6a50ca6fc79bc05
SSDEEP

1536:QukP4CVnWY7wbcZMx/2/UvTtdwBORwtEqfY18VP0Hh9o00lnH+ZN1:4AYSh/b7/wBOCtVfq80Hhqfd+V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03e4ac8942566b566cbbb9af18a2d56a_JaffaCakes118

Files

03e4ac8942566b566cbbb9af18a2d56a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3ba96b6bbe8fddaf67b8d0e9780053a5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetProcessAffinityMask
GetDateFormatA
ReadDirectoryChangesW
ReleaseMutex
Sleep
WaitForMultipleObjectsEx
SetMailslotInfo
SetLocaleInfoW
WriteProcessMemory
lstrcat
SetComputerNameExW
BackupWrite

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 100KB - Virtual size: 121KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE