122abdfcae5380d15ac83a33d9bbb412_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

122abdfcae5380d15ac83a33d9bbb412_JaffaCakes118
Size

115KB
MD5

122abdfcae5380d15ac83a33d9bbb412
SHA1

8b6497047fee234bbb2d0389e17338a76d633b1c
SHA256

82516408212574acbd6551de94abec7bc19ca7eb34254f9528c83ce1182d74f7
SHA512

3f2400a520c3489fe78f8cd946f84bfbc5923b1f2ca15fbe933a6cd4659ab771693356207b60938d870dc0a770e25b5687ffeb0f93f1035fa8b4a73046f23581
SSDEEP

1536:H9cbuSjyoZP1onVGBIMve8d5PKxQAWDCUytMQODeRHnon8ib2ZR:HKbuSjx2nVWIMvXz95XDepe8E2/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
122abdfcae5380d15ac83a33d9bbb412_JaffaCakes118

Files

122abdfcae5380d15ac83a33d9bbb412_JaffaCakes118
.exe windows:4 windows x86 arch:x86

efdc48335e01e76c0225c209da08f7b6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadStringPtrA
lstrcpyW
SearchPathW
GetDllDirectoryA
GetHandleInformation
LocalFlags
ReplaceFile
GetPrivateProfileSectionNamesW
GetComputerNameExA
InitializeSListHead
RestoreLastError

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 100KB - Virtual size: 121KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE