14f3cae35177aa30302a8d0150b6da68_JaffaCakes118 | Triage

Sharing

General

Target

14f3cae35177aa30302a8d0150b6da68_JaffaCakes118
Size

26KB
MD5

14f3cae35177aa30302a8d0150b6da68
SHA1

a566b41d4fd9c6ad89e1335447f18784d7e14a7b
SHA256

c42a61bee2b5acf3959c41fd76a169eff90a0ad748249d0fc917b58256a9d08c
SHA512

982717c32d00f6d77fc09efc06a65c63dba152c33504142e15e8664b70ec9ee5b67369de3b360140c7f61c2fbf59cf9d759def9af8a1acb2d56dd757e445b8c0
SSDEEP

768:GvNPsq1lDf+kMwpwPE+AHs6pfoR9CiQgOp:GvNPsqPCA9+AH5QR9Kp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14f3cae35177aa30302a8d0150b6da68_JaffaCakes118

Files

14f3cae35177aa30302a8d0150b6da68_JaffaCakes118
.exe windows:6 windows x86 arch:x86

77b5712277e4dbd07cb7a64407c84a3a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
MapViewOfFile
FindClose
GlobalFree
FreeLibrary
GetProcAddress
CreateDirectoryA
CreateFileW
GlobalLock
SetComputerNameA
Process32First
CreateMutexA
OpenProcess
GetModuleFileNameA
CreateProcessA
Process32Next
GetLastError
LoadLibraryA
GetVolumeInformationA
GetFileTime
GlobalUnlock
GetModuleFileNameW
GetThreadPriority
ReadFileEx
GetWindowsDirectoryA
GlobalMemoryStatus
SleepEx
FileTimeToSystemTime
GetShortPathNameA
GetTempPathA
CreateFileMappingW

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 16KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 494B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.lif
Size: - Virtual size: 1B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE