29cf8ed47ba709d2445f8e4ae85ee75c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29cf8ed47ba709d2445f8e4ae85ee75c_JaffaCakes118
Size

63KB
MD5

29cf8ed47ba709d2445f8e4ae85ee75c
SHA1

814e5aab15b42931abc657618c7cafc4a1fad5e8
SHA256

39c9f3970256cb63bd3caf95451bf807f75b59a75e9b8b9c1d781626b67e7179
SHA512

f86736ce407bb07386ac2a2faa253bcdc7feb2d729429f31750f0aa43a7c659aa48fccf850f1115f50d7424f887615004ebbb3eb91d85735de4a71ec45182ba4
SSDEEP

1536:oaQS1LIqM5T2tDcHrPexf3WoYOFaoyvut34sesHZyrw:oaQULK12qqxfGKaoyv0eW/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29cf8ed47ba709d2445f8e4ae85ee75c_JaffaCakes118

Files

29cf8ed47ba709d2445f8e4ae85ee75c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b7dc6511e09c1187e7a782162ad3d7d8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

PostQueuedCompletionStatus
GetStringTypeExW
GetConsoleKeyboardLayoutNameA
SetFileShortNameA
LZOpenFileA
SetFirmwareEnvironmentVariableA
SetFileAttributesA
InitializeCriticalSectionAndSpinCount
SetFileApisToOEM

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE