254a71ecd4cfdda3cc5119029f277743_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

254a71ecd4cfdda3cc5119029f277743_JaffaCakes118
Size

358KB
MD5

254a71ecd4cfdda3cc5119029f277743
SHA1

7fcf7a67735c7a990cd8995a0c800940eb9f3b62
SHA256

556be9d0efd9bdccd689c7ec6732b1562bc121cb70902456909e94aae4a68488
SHA512

673676351c2c63429b8b3630fcc29bad24c6f4c3e3078d8a36768d15738cb78306bd4008c4c403a7c0b5ecd6aee47c8e73a77f9e6f0cedad1fc1337fe1e50d98
SSDEEP

3072:ZNvVSf/Sx0vK/HVohSDTC1WyE00WSqoOcdXeWFa2s0kEAu3awPIOkAQxouA:d21W86qmdXzF5sfEr3ZPDkA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
254a71ecd4cfdda3cc5119029f277743_JaffaCakes118

Files

254a71ecd4cfdda3cc5119029f277743_JaffaCakes118
.exe windows:5 windows x86 arch:x86

30904b75db7eb8e0382c71e9498c96e1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_SYSTEM

Imports

kernel32

IsSystemResumeAutomatic
GetCalendarInfoEx
GetModuleHandleW

version

GetFileVersionInfoSizeW

winscard

SCardCancel

Sections

.text
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.CRT1
Size: 283KB - Virtual size: 291KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 290B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

yP
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ