229832d581bc93e33a7d1339a5126650_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

229832d581bc93e33a7d1339a5126650_JaffaCakes118
Size

56KB
MD5

229832d581bc93e33a7d1339a5126650
SHA1

c5ae365d2de20fc4a37ae946efe5d40c0095a8c2
SHA256

5a8613142bd4da7e2ca45e203778f7fdbc79dbb54cd6553653a7a8ae41032b1c
SHA512

45e4b19a4c8057a51726151359c1bccd6e8902f27bde95ef23b2e13993f98c27aa8ffc664add9d60b784f6905acb886f722e1684c6c5c554e3cf98a3b34c2d4b
SSDEEP

1536:pIlu/FMV3KHewPmiV0HhSAVe+1lafvP2W81gdRqEjufC:xaQPPmB7VnrOWx2d5jUC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
229832d581bc93e33a7d1339a5126650_JaffaCakes118

Files

229832d581bc93e33a7d1339a5126650_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2bc3d9268ced1e4dd27f999af89385ce

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyA
GetSystemDefaultLangID
BaseCleanupAppcompatCache
ExpungeConsoleCommandHistoryA
EnumDateFormatsExW
EnumSystemCodePagesW
GlobalUnlock
GetSystemWow64DirectoryW
FindNextVolumeMountPointA
GetExitCodeProcess

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE