437a137b4d12397fe5aad215102d8f73_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

437a137b4d12397fe5aad215102d8f73_JaffaCakes118
Size

83KB
MD5

437a137b4d12397fe5aad215102d8f73
SHA1

80023d97f06c0db5a460c1ef5b962ff024c7a77a
SHA256

8eecce1ebb11739be038295beb32a3abb95c8bff8abfd3ce1a4f5cb34f38ae49
SHA512

747c1bd8a4625a5a9c712d8553ec3dcd872132b0c88fe9460587bd0de2f7e036edf900285ce219ef9037fb9666d421184bf85cf966adb5f9c984caacc9ebb830
SSDEEP

1536:BbRz6ovCCHJgzci/DiMmQM4K3PemQIJhagk1oD5IjEErxTWDTMqhGKYIZTET8bDQ:5RWaCCHJgiMm4K3PDvJP0oWjBkMqhGKy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
437a137b4d12397fe5aad215102d8f73_JaffaCakes118

Files

437a137b4d12397fe5aad215102d8f73_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2fa0f213d8b56345cecd2dea23ad82b0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemWow64DirectoryW
GetBinaryTypeA
GetTempFileNameA
EnumUILanguagesA
CreateConsoleScreenBuffer
ZombifyActCtx
OpenEventA
ReplaceFileA
WaitForDebugEvent
GetConsoleTitleW
SetConsoleCP

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE