f409c12a7479775ce8c9d4c3881a08a7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f409c12a7479775ce8c9d4c3881a08a7_JaffaCakes118
Size

38KB
MD5

f409c12a7479775ce8c9d4c3881a08a7
SHA1

8ad58d2078914f2f6f79d8494e6d61d5c435c32e
SHA256

adc2ef689ffcfceca8db66b4f67a0c88e3527756a8aece216d18486bbd553e1b
SHA512

42cd5ceebd43806cf3e5eb55f98db6a6387c75363bdf93ac323f24d18db3c9ebb96d0ab436fe41d68a2d15b517ca05cf64472831cd15892c52c7003097663fba
SSDEEP

768:vt/Wdl9GRymyoTXX41Pi7xm0zhzqt/Wdl9GRymyoTXX41Pi7xm0zhz:F/WdfGdyoT41Pippc/WdfGdyoT41Pipp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f409c12a7479775ce8c9d4c3881a08a7_JaffaCakes118

Files

f409c12a7479775ce8c9d4c3881a08a7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1778503ced38d579f4990c6cf3fc93c0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocaleInfoW
GetNamedPipeInfo
GetProcessHeaps
GetProfileIntW
GetCurrentDirectoryW
GetDiskFreeSpaceW
GetStdHandle

msvcrt

_wcsupr
_wmakepath
_wrename
_wsopen
_wstat
_wtol
_wutime64

Sections

.text
Size: 1KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE