07eac737fce97dee0cd592c49d8eda1d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

07eac737fce97dee0cd592c49d8eda1d_JaffaCakes118
Size

56KB
MD5

07eac737fce97dee0cd592c49d8eda1d
SHA1

da6a9112f99e50cebaea61b6f180aa5a51e536bc
SHA256

0d2114953eb01aacc2233ef7a4470f4752eb431a61034c82a68873bc5e3451e9
SHA512

69f9500ce6d55f7ed8cfa5f1321d11a831107d9a699432a43ee203570f28d57fb71f7a2288351cf3f05f1325a93ced8845d85112c53f6eeed29dce4fb21b14cb
SSDEEP

1536:82+6cuyCK2lT+kAY/oEZbN+QpKNST8viC4NVLRf3CrXniXwF+:826uyOxzx/ZbRpKK8iNhRf3CTnM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07eac737fce97dee0cd592c49d8eda1d_JaffaCakes118

Files

07eac737fce97dee0cd592c49d8eda1d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

034b5cb7f05758ab73fd398e2c26075c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumUILanguagesA
GetLongPathNameW
GetFileAttributesA
_lwrite
GetCurrencyFormatA
GetThreadIOPendingFlag
MultiByteToWideChar
WaitForSingleObjectEx
RegisterWaitForSingleObject
DuplicateHandle

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE