07109bbcfcf82800fcc8e1d8e5e8fc5a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

07109bbcfcf82800fcc8e1d8e5e8fc5a_JaffaCakes118
Size

139KB
MD5

07109bbcfcf82800fcc8e1d8e5e8fc5a
SHA1

766eab47dc09eba83c27132e3d0adfde8730b1e6
SHA256

a4a2da2498e16fe51de94d926808170cfa82f249ef91cd5512565fda727f41c9
SHA512

406c82a58fae214a37cfd4615325d92737bde92678104e996bd48fa9d56f73bb24f3f22e560227abb31d33e50ace0ea15640ec873698f88325b86203f3dbf476
SSDEEP

1536:CN9orsPKrLGTxjttZLZu7YjmFMrDvumzsU/edhZKz/U8+UQyEKCUNrHPh6:CIrnrLGxvZLZ4MFuk5ekTEFjKHPh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07109bbcfcf82800fcc8e1d8e5e8fc5a_JaffaCakes118

Files

07109bbcfcf82800fcc8e1d8e5e8fc5a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c11f0742eb6e782ede849282fcec5307

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetComputerNameExA
IsBadStringPtrW
WinExec
SetLastError
lstrcmpW
ReadProcessMemory
IsBadWritePtr
GetConsoleAliasW
CreateDirectoryA
GetSystemDefaultLangID
OutputDebugStringA
LockFile

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 83KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE