18a4b257b752d8644ac027649042e8f3_JaffaCakes118 | Triage

Sharing

General

Target

18a4b257b752d8644ac027649042e8f3_JaffaCakes118
Size

63KB
MD5

18a4b257b752d8644ac027649042e8f3
SHA1

1a6c79336fba743c6edbd2d9323e362fac3afe4b
SHA256

e1887f04c4bcb8e7731a3efc3d41f98ffdbc9c5c25b88dbb2e49da20c0885f7b
SHA512

20c593748c90bbb9a64bd47607122c20abaace7553cc7115623b196be4103ee65c18d0b3188003c06ce222230ecd6ffebb748ec2d7049e67c297c40887bd57a7
SSDEEP

1536:5yrNmpYQ6JIjaxuPeBwb8AgG2Hs8BFyzQIbUbzGd4:5yAuQ6IaxuGa2G8ekf+d4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18a4b257b752d8644ac027649042e8f3_JaffaCakes118

Files

18a4b257b752d8644ac027649042e8f3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cd579ddbf02afb87b75d4cc6c27c1952

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MapViewOfFileEx
CancelWaitableTimer
AddAtomW
FindFirstVolumeMountPointW
EnumDateFormatsExW
SetConsoleActiveScreenBuffer
GetTempFileNameA
TerminateProcess
GetUserDefaultUILanguage
FindResourceExA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE