0b87ae1bd6bf589a092397173f855090_JaffaCakes118 | Triage

Sharing

General

Target

0b87ae1bd6bf589a092397173f855090_JaffaCakes118
Size

56KB
MD5

0b87ae1bd6bf589a092397173f855090
SHA1

eed7d4ebb5cffab8e0e3f49ce31bd458266f06cb
SHA256

20785682af12a788544959414191114e9f31dec6b0eb5d49cdf7493b146c3c29
SHA512

305f15acbe256beecb8bfb183596ccb1fcb6ab51cad0f34573fd051d2388cdcb9e7bf155e96cbce3682a2a1b3eeb8ea032dcaab5639fa86f182d9c122071d27b
SSDEEP

1536:HZqqq5lGGwttJDsUEPpsYdUuy/1iJBMA4SMMZzo9q62zaBZNQWRYPVny9sAO3/XB:HZqqqte0AQ1QWj0CponUaNkqRgfWu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b87ae1bd6bf589a092397173f855090_JaffaCakes118

Files

0b87ae1bd6bf589a092397173f855090_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b1ad5545c94c41726ed01d02f33b3fe9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CheckRemoteDebuggerPresent
CreateFiberEx
CreateWaitableTimerA
AttachConsole
CreateDirectoryW
TermsrvAppInstallMode
SetConsoleOutputCP
NlsGetCacheUpdateCount
GetPrivateProfileStringW
BaseUpdateAppcompatCache

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE