f4c455ff64c074c1a37db4e272c3d8e5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f4c455ff64c074c1a37db4e272c3d8e5_JaffaCakes118
Size

115KB
MD5

f4c455ff64c074c1a37db4e272c3d8e5
SHA1

b87efaa814128f7f59c04d065d573a854fbc4237
SHA256

db614a02fff06e93f9d4f4c07290c4d6680165a97e4adb73fa40869c3e51153d
SHA512

e0296e4b0d1526f23c5a909de9e12473b22a1b0ab5459a8b7995733f8845ae84746c52c6838ed56114c2dc7aecff8ba72d4ac466e2f3a728b9570a3efc147dba
SSDEEP

3072:WVBoE6+Rbsu8fFsQlHDmYYRg7H1MrA+razmAhExFTQO3:WBnwfFsQl9d7HaA+ShEnQO3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f4c455ff64c074c1a37db4e272c3d8e5_JaffaCakes118

Files

f4c455ff64c074c1a37db4e272c3d8e5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b7e6b98f82af82d158c97b48caab9ced

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetSystemPowerState
lstrcpyn
SetInformationJobObject
EnumTimeFormatsW
Heap32Next
TlsAlloc
GlobalUnWire
GlobalAddAtomW
GetVersionExW
CancelTimerQueueTimer
CreateDirectoryExW
FindNextVolumeW
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.text
Size: 5KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 1KB - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE