24d131d9a9cadb6ec2c16ec52f561f7b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

24d131d9a9cadb6ec2c16ec52f561f7b_JaffaCakes118
Size

43KB
MD5

24d131d9a9cadb6ec2c16ec52f561f7b
SHA1

94c1c3740a9d9fc2d7192d134091be370bf9a025
SHA256

ce423397138fede34b3648d245e0420d25c11b5b8f257915e9e60ce4c10c7ce2
SHA512

439331f82a74a1cd8c556d627a22be295ef982d9f0779e11cc8157f1b571dd0400451d799601d1bf32849c495c4a426d1418108958731173be04be9de454d4da
SSDEEP

768:W4mP7wnQyYLZTAc7Hbhp21hBzth2zMkzfp41pdqxFy/AlGCM63v:zO7r1ZTAoODhMXbC1bg4AlGE3v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24d131d9a9cadb6ec2c16ec52f561f7b_JaffaCakes118

Files

24d131d9a9cadb6ec2c16ec52f561f7b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a7eb46f0b8e259bd470c1d75419cbd91

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumResourceLanguagesA
FlushFileBuffers
GetDateFormatA
GetPrivateProfileStringA
GetVersionExA
MapViewOfFile
RaiseException
SetCurrentDirectoryA
Sleep
VirtualAlloc
WriteFile

msvcrt

__p__fmode
free
realloc
setlocale
strspn
wcscmp
wcscpy
wcslen

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ