e820869fbbe210f2a31c66a0c3a183a4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e820869fbbe210f2a31c66a0c3a183a4_JaffaCakes118
Size

76KB
MD5

e820869fbbe210f2a31c66a0c3a183a4
SHA1

807a305d770102f14e038d22a3fe2c1a28da1325
SHA256

20bd7e1f2bbc53373c7007b5251c2fad898a84e129f036ee26e56974827cd6d7
SHA512

fd6608470f0d4b68c5ef8cf78f951d224dddf5a09755daf2295769943e96f572c30c19183394d7a9b4e01677edd3b2493fbcc2cb95f0e4ca1e59fb71b8c1136f
SSDEEP

1536:o+KeuurFqO0Bc14a8Ane8VR+8H/IKGDTVmbS85MSQsCnvtR2jEErxTWDTMqhGKYw:UuUOxOdKBR+u/IKK0S85cnvn2jBkMqhj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e820869fbbe210f2a31c66a0c3a183a4_JaffaCakes118

Files

e820869fbbe210f2a31c66a0c3a183a4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4eb94af6cefe85501c5476454ed3c4d1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumSystemLanguageGroupsA
FindFirstVolumeMountPointA
ReadFile
ReadConsoleOutputAttribute
InterlockedExchange
GetStringTypeA
GetDriveTypeA
GetDateFormatA
EnumCalendarInfoExW
BaseQueryModuleData

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE