4320d441700dad75e6a62eacc42b7c0d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4320d441700dad75e6a62eacc42b7c0d_JaffaCakes118
Size

56KB
MD5

4320d441700dad75e6a62eacc42b7c0d
SHA1

cc4129622fe33109c37251aa504433d150c43852
SHA256

d207f6ab7daca52eda035b2ddda8b24f53d6d1201d764664cd19ab150d9538a7
SHA512

a4d026dd3afaf97c9313c2dcd7704b0132ada074a543faef0fd9d84ba6ca433daef69053a11da350b5cd50b4c82ba03970743fbfd72fd47b0dbe544d0ece3e0d
SSDEEP

1536:LWT17r4WGEvYj8q8suuv2Q8V2pX+r7U7KV5/NdjPt:Sh75GEG8q8xFviutN5t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4320d441700dad75e6a62eacc42b7c0d_JaffaCakes118

Files

4320d441700dad75e6a62eacc42b7c0d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1107abc2b37a21ad79674c54859040a8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReleaseMutex
SetConsoleDisplayMode
Module32NextW
GetHandleInformation
IsValidCodePage
IsBadStringPtrA
SetLocalTime
FindNextVolumeMountPointA
GetCurrentConsoleFont
SetSystemTimeAdjustment
GetCPInfoExW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE