f7540b2cb3330f4de8350bc7a16b1027_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f7540b2cb3330f4de8350bc7a16b1027_JaffaCakes118
Size

63KB
MD5

f7540b2cb3330f4de8350bc7a16b1027
SHA1

166cef094e4001f99be7351a6af6f9ddea20bd39
SHA256

a4bb8ff57429b555888534ddfec3eadefd90334bb760e82f56ffaf80c1d99e39
SHA512

5915cb0da8b9797424cd525065c4ce4c4e5daa08c132ee928e670e8879e829232c005800a645fe85793a77ae2970fdfacfb2a01ab8013fdfa2b7f07054002bf6
SSDEEP

1536:ywn4koEtxWUlKtIi280YMRoG3n1sN0PmnJaH23lEytcP/0:IEuUM6iS8m1u0WaylEAcP/0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f7540b2cb3330f4de8350bc7a16b1027_JaffaCakes118

Files

f7540b2cb3330f4de8350bc7a16b1027_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f9f2e88de6538ed52c40c01b34c3d688

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalLock
RemoveLocalAlternateComputerNameA
SetConsoleTextAttribute
QueryMemoryResourceNotification
GetTickCount
IsBadCodePtr
FlushConsoleInputBuffer
RequestDeviceWakeup
SetLocaleInfoA
GetCurrentProcessId

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 48KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE