2415e7647fe77aec45666edd205dbcb5_JaffaCakes118 | Triage

Sharing

General

Target

2415e7647fe77aec45666edd205dbcb5_JaffaCakes118
Size

99KB
MD5

2415e7647fe77aec45666edd205dbcb5
SHA1

4959d52435f269ef4178c73d52bcceff25cdf8a8
SHA256

eab031a4c37b9330f8803d5aca0b2466c83b33b0ecaac1074959ba568074d3c8
SHA512

e094d7ad5e1f560093c21c21a7bd1e02ec315080a8b9dd8c1957136f49581ce88a7e7cf5e24756148ae7bda55d68cc9d9d42bb272e91e2c47a46c6d15e15bfe6
SSDEEP

3072:Zaw54gV1Us9VNr5SCsu2oh40kv3VucVEB:Za4h9T5Fsu6vFuP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2415e7647fe77aec45666edd205dbcb5_JaffaCakes118

Files

2415e7647fe77aec45666edd205dbcb5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6c2adf1044f076c689e18b4242d79403

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateWaitableTimerA
LZCopy
MoveFileW
GetUserGeoID
EnumSystemGeoID
Thread32First
RemoveLocalAlternateComputerNameW
GlobalMemoryStatusEx
FlushFileBuffers
GetStringTypeW
IsSystemResumeAutomatic

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 41KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE