f505260eae9ca3021f001a925eb87c53_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f505260eae9ca3021f001a925eb87c53_JaffaCakes118
Size

83KB
MD5

f505260eae9ca3021f001a925eb87c53
SHA1

13d7f01b55d38701db7b69134656eda9ad4a0c56
SHA256

0f3b57c20ec941e44b9818923fb51b4e1188d616184bca598c1c1e6caccdadcf
SHA512

1b1ca46e44c389bbcbbabb28dd5dfeff3b4bb7c47445b840e84fe8ed5dc1ea115370a32284a5c9477fb603433bf43ec7fc5fb5e12a364065448d0ca653bebfed
SSDEEP

1536:z8ZlCZsRn1xwiM+MVDoYPwq2w7WGJO0aGu8AjEErxTWDTMqhGKYIZTET8bDQ:QDCqDwrFvP8KWGJvajjBkMqhGKZTbbc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f505260eae9ca3021f001a925eb87c53_JaffaCakes118

Files

f505260eae9ca3021f001a925eb87c53_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2e88e8c1ce977a81104112067605291f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVolumeInformationW
CloseConsoleHandle
TzSpecificLocalTimeToSystemTime
IsBadWritePtr
SetClientTimeZoneInformation
SetThreadUILanguage
LockFileEx
DeleteTimerQueue
ReplaceFileW
UnmapViewOfFile

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE