13078e889e6133e133ae78e339290910_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

13078e889e6133e133ae78e339290910_JaffaCakes118
Size

56KB
MD5

13078e889e6133e133ae78e339290910
SHA1

350c22bb56c382b42b64d1b33cedb34ed0b1eb79
SHA256

d909108033fe6137d89c92e733b84328fce37e41a5b7f77548fc857c34622242
SHA512

439291b8315e23b8020b9246ce1387b8301a9797a9420bff1f9101571631e0c6813cae3e81bffeaf6ce9284f03b02dd8cbd786bb713209d39293dee3a35bffd1
SSDEEP

1536:FHHHkilUPpozbglutBZLZP49Y6mj6PK389+XU0sVMhFpqAy:FHHHkilUPpo0l+Z/18w8Ups

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13078e889e6133e133ae78e339290910_JaffaCakes118

Files

13078e889e6133e133ae78e339290910_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2341385d75f80737b62ca6ce20c67b15

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ClearCommBreak
RtlZeroMemory
GetThreadTimes
WriteProcessMemory
SetErrorMode
AttachConsole
RegisterConsoleOS2
GetQueuedCompletionStatus
SetFileAttributesA
CreateProcessA
DefineDosDeviceW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE