14bd8db53d9006bb0c5b3ae4dd5e3909_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14bd8db53d9006bb0c5b3ae4dd5e3909_JaffaCakes118
Size

62KB
MD5

14bd8db53d9006bb0c5b3ae4dd5e3909
SHA1

bcafc81ecd78e1920afca3cd92f23e185c8bf9e5
SHA256

f08d639cbedb593bc7e9ee06df7e38f5053304288f954837452bfb6a7bf811a5
SHA512

ad6be28c9f407d1006316888cef7eb7fa0d5e23da08cea4394e825a4ef188ebe14c0297116d1b2104b3b49ad016e485abec94e4cc7ad238211a937060a87b6ca
SSDEEP

1536:ZLch9MdUBQQsV+kx6vMRbklG0Tjz5ZqBSM8Yp:ZVdcQrV+Y6kaA0Tjz0SpY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14bd8db53d9006bb0c5b3ae4dd5e3909_JaffaCakes118

Files

14bd8db53d9006bb0c5b3ae4dd5e3909_JaffaCakes118
.exe windows:4 windows x86 arch:x86

30d4226f390a0e2aac0a0bcfb5abcebc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpiA
GetNumaHighestNodeNumber
IsProcessorFeaturePresent
GetConsoleInputExeNameA
GlobalAddAtomW
CreateSocketHandle
EnumDateFormatsExA
VirtualBufferExceptionHandler
HeapValidate
GlobalFindAtomW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE