3e760f08286ee4b8c7fb76795a04ec62_JaffaCakes118 | Triage

Sharing

General

Target

3e760f08286ee4b8c7fb76795a04ec62_JaffaCakes118
Size

56KB
MD5

3e760f08286ee4b8c7fb76795a04ec62
SHA1

bf17ad74b8ccdc5609fd94ba9200c4feb07aadf2
SHA256

2d270cdd1d34d5562ea85073d66412ba7751b81f6b53223aa63b4711a9ab5900
SHA512

a4c51a13f6f0c01bce53a174d99b29a1129eb41210d5dbcf94782d061a8d30dda025495a2aac3c7e8a7cba283f88bc8fc831b91ad744266af0e95498768b22e2
SSDEEP

1536:siWe7aFFF3wNl5Tb+tgu5DZsHGVXlu4gO:nWe+7KTO7UGVXI4V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e760f08286ee4b8c7fb76795a04ec62_JaffaCakes118

Files

3e760f08286ee4b8c7fb76795a04ec62_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1323cbe0e7fd8eaeefaa8cf515d3ae27

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CancelDeviceWakeupRequest
LocalHandle
SetUserGeoID
EnumerateLocalComputerNamesA
GetCommConfig
GetProcessShutdownParameters
NumaVirtualQueryNode
SetFileTime
EnumTimeFormatsA
FreeEnvironmentStringsW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE