07090587a2c6f33f29209bb6eb51f81a_JaffaCakes118 | Triage

Sharing

General

Target

07090587a2c6f33f29209bb6eb51f81a_JaffaCakes118
Size

83KB
MD5

07090587a2c6f33f29209bb6eb51f81a
SHA1

12c6c3a0fe8792d1eca7bbd8710c4a1d2c25890c
SHA256

b585b867edd41fe60ae37c84549cf673729237f861c787a877fa47b3dcc2419f
SHA512

5274d7d1b819514d7ba46465306007f4c9589cf3dd51c8b298afb87d18bf888afb55b07a2fdd615e627e6fccde1ad5c544439ee4a72cbc946cdd9a2f0725b5f8
SSDEEP

1536:bd0002pLy4cQ+kadroY2Iy8cFarBDMnaPoygbK1jEErxTWDTMqhGKYIZTET8bDQ:bd0002lfdc2N8cFa1Yn+Fgu1jBkMqhGZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07090587a2c6f33f29209bb6eb51f81a_JaffaCakes118

Files

07090587a2c6f33f29209bb6eb51f81a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ac9327bfdb22eb2357ad3b892c93e170

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTapeStatus
GetPrivateProfileStringA
InterlockedExchange
GetCommandLineA
GlobalCompact
CopyFileA
SetHandleContext
GenerateConsoleCtrlEvent
GetWriteWatch
GetDiskFreeSpaceExA
GetComPlusPackageInstallStatus

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE