256c3a268a4f350d59715aa0ce537f16_JaffaCakes118 | Triage

Sharing

General

Target

256c3a268a4f350d59715aa0ce537f16_JaffaCakes118
Size

56KB
MD5

256c3a268a4f350d59715aa0ce537f16
SHA1

1b4bfd64dc32dacd00f30a9e2cafc656db116936
SHA256

ac7c11142f72113b9cbf29502b15c551199e54587e45b908fb941aa614ef9489
SHA512

e78b1cd932ac3ad6b9b84f27965cbe9c8b5addc68cd6bc6e9dac91e9b8c24afcf26bf9adf5d778109a89b9e0c012760b14c49db3f21d30f789cb4fad0be91994
SSDEEP

768:ir25T8BIilJPUCumgyWJmb7qw8QB7uvEjwUlFwLW4rnCJB7B5qBqkoSFM2A5jTaF:YICudj0aMj4rnCJn5Eqko0M2A5sQXzE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
256c3a268a4f350d59715aa0ce537f16_JaffaCakes118

Files

256c3a268a4f350d59715aa0ce537f16_JaffaCakes118
.exe windows:4 windows x86 arch:x86

86e00958fe8ab7849ac1baf7cc0dfa2e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetAtomNameW
GetProfileSectionA
MapUserPhysicalPages
InitializeSListHead
SetLocaleInfoW
GetProfileStringW
FindFirstFileW
SwitchToFiber
WaitForMultipleObjectsEx
GetFileInformationByHandle
AddVectoredExceptionHandler

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE