04a2d0f1dba8ef1808f719a733a32c4b_JaffaCakes118 | Triage

Sharing

General

Target

04a2d0f1dba8ef1808f719a733a32c4b_JaffaCakes118
Size

87KB
MD5

04a2d0f1dba8ef1808f719a733a32c4b
SHA1

5d5630ef8c4723c5deb2a91e4a9763aaab2cf0b9
SHA256

e57d8b7834f9866bde6b5dea949d5c4069a0b7e1f8e34b037efddeeda6402aa7
SHA512

a6682c497edb3f7db9135d809fd33860c92a26a7edac5d002ad0cd37d099797c6a0b6f3c30a2bd1776e1a8dc6b312ba315f2a59664234d606af95be9d9ea0a67
SSDEEP

1536:3jGuRh1JdbT3QKoKIDmnlpOWNdsGWIV+NKdBKVgCrbebCSjEErxTWDTMqhGKYIZE:yuRh1JdbT3QKoKIDmnhdd+NKTu5mCSjH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04a2d0f1dba8ef1808f719a733a32c4b_JaffaCakes118

Files

04a2d0f1dba8ef1808f719a733a32c4b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b4ad4e55471f653fb13f04930deb46d2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BaseCheckAppcompatCache
GlobalAddAtomA
GetCommandLineW
EnumSystemLocalesW
ExitProcess
GetLinguistLangSize
GetLinguistLangSize
CreateWaitableTimerA
LocalShrink
GetFileAttributesExA
GetVolumeInformationA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 31KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE