08d8b6aaa955487e3f64ed53fa3d09ef_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

08d8b6aaa955487e3f64ed53fa3d09ef_JaffaCakes118
Size

63KB
MD5

08d8b6aaa955487e3f64ed53fa3d09ef
SHA1

4cdc70cb45de32e28fd71041f32a74e4e7bf94ac
SHA256

491f0aaa5a9967ecc3479dc0b93d99effe6a687c308c3ac282c15d74a733a696
SHA512

70861ba57d2efaf0ea2409f3c48a309ccced100cc7aedb423e395cc83e60f2a33421b6c94ae51249dd94f2b90e615b1cb8422b9cab5313cf4c73a7457405f001
SSDEEP

1536:6TYgNc4g6698PpY5ZO0MxFQ2DucuWaKVA0XD/C77Qu9jvRsA5ZFlf:6TFg669OcYnxFDd3A0T/C7c+sA5Zrf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08d8b6aaa955487e3f64ed53fa3d09ef_JaffaCakes118

Files

08d8b6aaa955487e3f64ed53fa3d09ef_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3e1db49590eb3405265c137fad5da3f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CancelTimerQueueTimer
InterlockedIncrement
SetNamedPipeHandleState
SetDllDirectoryW
GetStringTypeA
GetCompressedFileSizeA
EnumDateFormatsExA
CompareStringA
SetVolumeLabelW
LockFileEx
ReadFileEx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE