227c236a69e136b82effa449c17cb8c9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

227c236a69e136b82effa449c17cb8c9_JaffaCakes118
Size

62KB
MD5

227c236a69e136b82effa449c17cb8c9
SHA1

018e81a3042d622b0060097b0474cbc0e3252425
SHA256

a9666b72bb652a49624e02b5de5f375d41ee40ce0c6beec47674953a4ac56758
SHA512

341e902e6bfb46cdc3334fc3408b1ba77443aedd1e1817d091dcc0b4d77d177952dc2f71cc4918199452bdc39d60ab4b2d232d8b321062da129a9a4c009b8d28
SSDEEP

1536:Rn5KN4/wyKgzAp8u8c7f4FI/JVcVs7XH1:aBp7B/JQuXH1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
227c236a69e136b82effa449c17cb8c9_JaffaCakes118

Files

227c236a69e136b82effa449c17cb8c9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5faa126f633af8a4b7a7f9607f53a71b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExpandEnvironmentStringsA
SetTermsrvAppInstallMode
IsValidLocale
SetFileAttributesW
lstrcmpA
GetCommState
SystemTimeToTzSpecificLocalTime
GetPrivateProfileStringA
GetModuleFileNameW
GetConsoleNlsMode

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE