07021ac82fefa0b840dfd4c19e64258a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

07021ac82fefa0b840dfd4c19e64258a_JaffaCakes118
Size

253KB
MD5

07021ac82fefa0b840dfd4c19e64258a
SHA1

e390611d46eecc1fe2548762d48dab6650caa769
SHA256

d66c7e84b5b65788ccc3bb2b74a098060b264c950a093e07b638afd6b7bf79c2
SHA512

2c0f8c8734a91bd2129f6fbd453679d3048d3fd928d71f6c5438871394c045b71fdaf7aacdf2a1e18bbdb7d22524d29fe54ffb3b3077af3ee0724249c1189e67
SSDEEP

6144:KBSELLwJ8qplaXhCA4cUb2//aFqwZfdzsJz6V5i6HcqcPXGh+QIILXqZmENAod:q/wJBfah1Uy/nwZfdzsJOncq3h+QIdzd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07021ac82fefa0b840dfd4c19e64258a_JaffaCakes118

Files

07021ac82fefa0b840dfd4c19e64258a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

16924248e912f85af52134d3ee885097

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AddAtomA
VerSetConditionMask
TransactNamedPipe
SetLocalTime
lstrcpynW
GetTapeParameters

Sections

.text
Size: 236KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.extra
Size: 1KB - Virtual size: 62KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ