134bb96acfc3a290c7ad86bbc5636909_JaffaCakes118 | Triage

Sharing

General

Target

134bb96acfc3a290c7ad86bbc5636909_JaffaCakes118
Size

56KB
MD5

134bb96acfc3a290c7ad86bbc5636909
SHA1

6490ea9c5f27171dbd7027ffad47a7ceb8ee7b17
SHA256

1545dbad5f30404d3e987d7f8349b9dee8515bdeb9171fb63cb758d79b9991f8
SHA512

a050d67ebd67a5d04d712ac9803df31a67c79e4ee2eda4f607a20dd178392cc60d354ad0fc551f0cf5656ca67aab4c4b730425e8d1c0ec0945708dcdc943931b
SSDEEP

1536:+YfBXIpsbrncLNZ0ky+ljfmGXWqieIGkc:nfOLXLlj+KrIGkc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
134bb96acfc3a290c7ad86bbc5636909_JaffaCakes118

Files

134bb96acfc3a290c7ad86bbc5636909_JaffaCakes118
.exe windows:4 windows x86 arch:x86

122e9e2e4b1feb36be92c72dfaebba35

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleNlsMode
SetCurrentDirectoryA
GetConsoleAliasesLengthA
CreateThread
GetWindowsDirectoryA
SetErrorMode
GetQueuedCompletionStatus
LCMapStringA
FlushViewOfFile
FatalAppExitW
DeleteAtom

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE