2275720813c77c0494c752a1597b753a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2275720813c77c0494c752a1597b753a_JaffaCakes118
Size

63KB
MD5

2275720813c77c0494c752a1597b753a
SHA1

845bca9a6a1d9ca9a2b4950eb7dd9c1d5453000f
SHA256

179cf430de083ef4f273660f3d27dd468ba34278d46cad68f38182e4e6dda1e2
SHA512

0b5db5607947bea5db012ac73218c53bbfd32696e8f7860135a95fb2a3794fb26d472a6d67f731d6d2017f2777b5a8095c24012bb6b4cf1b21ae9b8879f8441f
SSDEEP

1536:13IeGcoIvspcuX+s3pCtWzJgRB9uKfY4vxmd/l:pzoIOcuX+Ku2IzfNJwl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2275720813c77c0494c752a1597b753a_JaffaCakes118

Files

2275720813c77c0494c752a1597b753a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

487701d2681374d1e5ba874795bfd570

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumSystemLocalesA
CreateFileA
GetTimeFormatW
GetFileAttributesW
ReadConsoleInputExW
AddRefActCtx
WriteFile
InterlockedIncrement
EnumCalendarInfoA
CreateHardLinkW
IsValidCodePage
MapUserPhysicalPages

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE