407df352f70d2dc16b2c067b51e068e1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

407df352f70d2dc16b2c067b51e068e1_JaffaCakes118
Size

73KB
MD5

407df352f70d2dc16b2c067b51e068e1
SHA1

6588ee9d3c9d2f32b8b7b01fe72d436754babb2c
SHA256

2b22cb7dfa41c8a17f48ce92e1e5c32127f6d5d1363b6e5f0066a93e99721422
SHA512

7c31ea4ce77067b4d4f5a11873153350a3713ea42d23af194dfb0f1b676bed9aeb16734337256447e7aaf1c9c0980b1096ffca753a24cdf3b5410be0083b3fe8
SSDEEP

1536:rpLPSH7sSL0q1aspOXdD0ZP4rGAw6ZSrIZ6K7a/avGiaCezhgH:rlSHfHQIpeTZSEU5BNG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
407df352f70d2dc16b2c067b51e068e1_JaffaCakes118

Files

407df352f70d2dc16b2c067b51e068e1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e528737b789e8a5943199797fbfead11

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentDirectoryW
GlobalFlags
CreateTapePartition
EnumDateFormatsExA
CopyFileExW
Process32Next
RequestWakeupLatency
DeleteTimerQueueTimer
EnumCalendarInfoW
GetCPInfoExW
GetConsoleHardwareState

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE