01309f99f3fbcedbad9f7f0faab9804f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

01309f99f3fbcedbad9f7f0faab9804f_JaffaCakes118
Size

24KB
MD5

01309f99f3fbcedbad9f7f0faab9804f
SHA1

cb89a9349bc8aa1c1ecc5cc4d8b45c83bf38ff97
SHA256

948f7eb66c5266a54dce319a4b5987c4276c92bea10277497fa829cdedcabbeb
SHA512

e370eb709af5e20036aae18537cfe00004ee16a2d55fa6534a88a81138f69e153f2f48f3255deee9fbb3c1a21271d4b4d5c992f2e1ef429f85cce38de43467f7
SSDEEP

384:XcEunIuO4gic8arvzz7V5ezGYVwA66OFKswfuEPs5V2cg1:s1nBzgic88vHv+wA/NswGOs5VXg1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01309f99f3fbcedbad9f7f0faab9804f_JaffaCakes118

Files

01309f99f3fbcedbad9f7f0faab9804f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fc8ca9a394902025bced87171c0cef97

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateWaitableTimerW
CopyFileW
DeleteAtom
EnumCalendarInfoExW
DeleteFiber
FatalExit

msvcrt

__p__osver
__p__winver
__toascii
__argc
__doserrno
__threadid

Sections

.text
Size: 13KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE