f4b5e2d244a2fc3e341234837b2e4717_JaffaCakes118 | Triage

Sharing

General

Target

f4b5e2d244a2fc3e341234837b2e4717_JaffaCakes118
Size

28KB
MD5

f4b5e2d244a2fc3e341234837b2e4717
SHA1

a401bff7013d59f6c5dec4410f1284b7a1d96407
SHA256

b4da25de8ccdfda87112fd5b2fc19cd4e07e778ccafd4bc8adc5e8673327bb9d
SHA512

d99af6cb0cd27b700f5580c46697565eb1a50c5db9683dc27e97628fc2144eb25939b910c8b4581a5eb895b87ec80036bad18b821b6fae1fe2f5e68fde7f6b1d
SSDEEP

384:XhekdQyrhXwAxZ54AGEjzDIqcL1pkvMIO1drmB8P/Sj6/jEOop1:xekdQCd5rHkqcLIO1dI2/Sj3z1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f4b5e2d244a2fc3e341234837b2e4717_JaffaCakes118

Files

f4b5e2d244a2fc3e341234837b2e4717_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fc8ca9a394902025bced87171c0cef97

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateWaitableTimerW
CopyFileW
DeleteAtom
EnumCalendarInfoExW
DeleteFiber
FatalExit

msvcrt

__p__osver
__p__winver
__toascii
__argc
__doserrno
__threadid

Sections

.text
Size: 17KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE