096a46f33eeb12e21de42d29f3df4401_JaffaCakes118 | Triage

Sharing

General

Target

096a46f33eeb12e21de42d29f3df4401_JaffaCakes118
Size

56KB
MD5

096a46f33eeb12e21de42d29f3df4401
SHA1

b17954399536a77de10cc1961b15e6a36ec5a957
SHA256

85730deeb2093e02570a694c443afb92590acc050d80b93e4e0c04c67e2ec957
SHA512

156dc756e05a64f1a2028618e82a65bcea123843ded80cf5cf780834c4a8483505b16984ee8ac74fc33dd1d601beb7e0f7c08c4842af1164ae737ca9dc4e1100
SSDEEP

1536:rudj3n48M+xqaukqkIp7+VEknoiWuT9jqC9:S3n4sdIpCVFiQ9f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
096a46f33eeb12e21de42d29f3df4401_JaffaCakes118

Files

096a46f33eeb12e21de42d29f3df4401_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd57c4574a9e37e1b56fb39e2f9244cf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
GetExitCodeThread
SetConsoleMenuClose
SetTapeParameters
GetCPInfoExA
CreateThread
GetSystemTimes
LZOpenFileW
GetConsoleCP
EnumCalendarInfoExA
DeleteVolumeMountPointA
GetNamedPipeHandleStateA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE