f4c6b8cfb62a88c776fd107b3aa749fe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f4c6b8cfb62a88c776fd107b3aa749fe_JaffaCakes118
Size

83KB
MD5

f4c6b8cfb62a88c776fd107b3aa749fe
SHA1

b0d0be63af377a6d2858a63f5e8f3a6dd1ec72e6
SHA256

1877b295257271cc895afe3701eee92d7a69bdb730075950ecdc1c431a12db77
SHA512

902049fc5346dd0746bc04f2215b6745e9e7d849dc125855e3eacfd1126f1c57f78afd51e680d03fe05d886a04c11704d74373e4425514af384f348fd351d4cb
SSDEEP

1536:fuwsLKLnUZlPDGLlW7W7evsFNnTNctxXsjEErxTWDTMqhGKYIZTET8bDQ:9sLKLciZWdEFfc8jBkMqhGKZTbbc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f4c6b8cfb62a88c776fd107b3aa749fe_JaffaCakes118

Files

f4c6b8cfb62a88c776fd107b3aa749fe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0fa52d8f875b15b56e89805ccede81ac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTimeAdjustment
SetConsoleHardwareState
HeapWalk
SetCriticalSectionSpinCount
Beep
WaitNamedPipeW
LZCopy
WriteConsoleOutputA
SearchPathA
AddAtomA
GetEnvironmentVariableW
GetExitCodeThread

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE