0a761271816871a7d8d45fb459f63cd2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a761271816871a7d8d45fb459f63cd2_JaffaCakes118
Size

1.4MB
MD5

0a761271816871a7d8d45fb459f63cd2
SHA1

a7a11df9c3d4322cb225eab77b20a47c39a689d0
SHA256

30d9c2b9da070f1f8990d4725570d985377db453de735af7b4de1a8551429294
SHA512

d48c037f7976aa9980a273b87fd2ac853f2122417fa9f47ac09411ac01073aef94ebf84c7119f2ffd22af9b37ef36b30ea26da5f819761dc43f8eda8fec95b59
SSDEEP

24576:DFrx3rvu6VbM3TDa6MUoilA7BhvbhhiGerG7hR/0O0kAfnJviO:9dtVbM3/oicjhheWtAfnJa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a761271816871a7d8d45fb459f63cd2_JaffaCakes118

Files

0a761271816871a7d8d45fb459f63cd2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

435fd41272abd6f8c2c134fe84b84f14

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

EnumSystemLocalesW
FindAtomW
GetAtomNameW
GetDateFormatW
GetModuleHandleW
CompareFileTime
DeleteFileW
EndUpdateResourceW
VirtualProtect
ExitProcess
GetDriveTypeW

Sections

CODE
Size: 579KB - Virtual size: 578KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 844KB - Virtual size: 844KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ