462153af9692db655aadd9f35dc7bb83_JaffaCakes118 | Triage

Sharing

General

Target

462153af9692db655aadd9f35dc7bb83_JaffaCakes118
Size

144KB
MD5

462153af9692db655aadd9f35dc7bb83
SHA1

08a3ed996aa861085a0d0ebc7f3560b930e119f6
SHA256

6cdea53c056faa9065cfb91ba66fcc8f3b62f037c938297e7bc12addd42cd1ad
SHA512

8c72aa2cf9d10ebe6a3ca09b8380f634266668261516e3fb2112f04531479179a9aede474dcfadc12bf8f12abeec124667177ad1f5ce6b9ce448fde725cc5c4b
SSDEEP

3072:XHSWNou7HOrLPNjD34BA8glRan+je0DZGQNM+MmpsB/uQ8Pw+ZKRvwXsq:XXNo0OHPNX4qlRan10oQNxMnBLChKRvY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
462153af9692db655aadd9f35dc7bb83_JaffaCakes118

Files

462153af9692db655aadd9f35dc7bb83_JaffaCakes118
.exe windows:1 windows x86 arch:x86

6b4a24f759e8a7e9de174f380d118e8f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetTempFileNameA
IsBadReadPtr
HeapAlloc
GetLocaleInfoA
CancelWaitableTimer
CreateEventW
OpenThread
MoveFileExA
SetConsoleInputExeNameA
HeapQueryInformation
VirtualAlloc
OpenFile
SetCurrentDirectoryW
UpdateResourceA

Sections

CODE
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 86KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 360B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ