38b8ca639a4e122bd6ee53ffe20c92d0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38b8ca639a4e122bd6ee53ffe20c92d0_JaffaCakes118
Size

56KB
MD5

38b8ca639a4e122bd6ee53ffe20c92d0
SHA1

6144cc2f2e69c2e04bf368f7f0a30fe664eba2a1
SHA256

22e6da8be4103f10b4d439f44caefd9014b45ff66a367325198332427d9af33c
SHA512

738882b2299f12abc7cbcef4d99c7b6c0cda45f71474f0f5555d759e76b697d5af14a294abc1e7b9a637188661fcefd9e4bc2b6e1f1e5e87ecbe70a3680bcc02
SSDEEP

768:yC1JY0XP/MZLdMJ+EmhNVUFEbUb4vPxj9hiodqShdM4CoT79ZUcHDdyYFwyyJ0zD:zF3bEQYTiedMVGxZXoJ0mg2fAhkwzUiP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38b8ca639a4e122bd6ee53ffe20c92d0_JaffaCakes118

Files

38b8ca639a4e122bd6ee53ffe20c92d0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7c59b8e881e0a24685709df03eee04ba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LZSeek
DebugSetProcessKillOnExit
TryEnterCriticalSection
OutputDebugStringW
OpenFileMappingA
CreateSemaphoreA
BaseFlushAppcompatCache
GetPrivateProfileStructA
GetConsoleAliasExesLengthA
DisconnectNamedPipe

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE