f0fcb3b85e7622960d96d86d3f9ccede_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f0fcb3b85e7622960d96d86d3f9ccede_JaffaCakes118
Size

58KB
MD5

f0fcb3b85e7622960d96d86d3f9ccede
SHA1

7844bbd14537217128e0e8d791e490c9b933316a
SHA256

dcd971281855fae6ab57891fe261aaf3690be4f2b1f86bdc70fe3d270bdf6b8d
SHA512

290be3c814d5d3b462eb38e1a2d7d9b29756777b16b3d9fbb446756a4825d43aad5099c9057a25f7baff8af01dd69af3c9a78f8ed1e9d9beb62f33061a0239df
SSDEEP

1536:Rx737ejV65Eh80UUO/rZH4VrreIDx3kTTsXY/nslmBRnpZZ8E:3zyR65EhPU1DZH4Vr36/wYcmjnpzN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0fcb3b85e7622960d96d86d3f9ccede_JaffaCakes118

Files

f0fcb3b85e7622960d96d86d3f9ccede_JaffaCakes118
.exe windows:4 windows x86 arch:x86

33c150f6c3f9a77fb6b4efc8ae839884

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VerifyVersionInfoW
SetProcessWorkingSetSize
QueryDosDeviceA
GetComputerNameExW
SetLocalTime
_lclose
GetLogicalDriveStringsW
GetFileTime
CreateMutexA
lstrcpy
SetComPlusPackageInstallStatus

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 36KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE