f920d680b4433640a476483a797a378b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f920d680b4433640a476483a797a378b_JaffaCakes118
Size

76KB
MD5

f920d680b4433640a476483a797a378b
SHA1

e3b45855a4971e86cbceb51ac29647b423bffb0b
SHA256

e7b13c809346c7c9d73b1709ad1a086ad9e5b57ff05a4d34e46d07c331619965
SHA512

0f8b62b07fffb5794bc2b252e661d728c2e2e4486420e1290e6e9ce17a68790b7d7259c27e60471d493ecd43c82767fdd46ea1be65bb55b78aa79acbb8a92568
SSDEEP

1536:clV44Jur5pLcC1ehFdJPp3DDnCqmdbzPDRi/pjVrs2ryrd1vUQuq6:cle4Eri/D+qwTRmHs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f920d680b4433640a476483a797a378b_JaffaCakes118

Files

f920d680b4433640a476483a797a378b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

44d4c2667d87d25dbc829c9068e0ece0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FatalAppExitA
BaseProcessInitPostImport
SetCommState
GetExpandedNameW
GetConsoleTitleA
TlsGetValue
DeleteVolumeMountPointW
GetLogicalProcessorInformation
GlobalFindAtomW
GetOEMCP
GetTickCount

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE