24157342a7325e3db5a66bef756095a3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

24157342a7325e3db5a66bef756095a3_JaffaCakes118
Size

92KB
MD5

24157342a7325e3db5a66bef756095a3
SHA1

2d3e13e0416632e10a7cd759674594697cf70397
SHA256

b0f6ed17164bc83f846957847e0a5375bec7fc714ac7eba694e4418ff3dde8c2
SHA512

06d8dc4f785e650f1e67ce3245300b22faa5eb7b29e8f67f735a2553d3e133211d2f8810b40b34fefd51de56735102fa6a8eab1d05956d3ab28049d30d2c1755
SSDEEP

1536:FgREHC/cyfC0VNfzMp1yUQ/5bLSscMJZ83YacIyP/69QAq0Gb8/Z5H83oKz:y/n1VNfUoU8NVceKYBbWq0GQP0oKz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24157342a7325e3db5a66bef756095a3_JaffaCakes118

Files

24157342a7325e3db5a66bef756095a3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0155850e18bde339cf17cc52d78deccd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryExW
PulseEvent
FreeResource
WriteConsoleOutputA
CreateMutexA
IsBadStringPtrA
GetCommandLineA
IsBadReadPtr
VDMConsoleOperation
GetUserDefaultUILanguage
lstrcpyn
EnumCalendarInfoExW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 36KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE