4487d2d95fbd5f8052d9dee0029b0641_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4487d2d95fbd5f8052d9dee0029b0641_JaffaCakes118
Size

62KB
MD5

4487d2d95fbd5f8052d9dee0029b0641
SHA1

4a7938831f90dd5e50df601fc0805844eeec506e
SHA256

4c74867781390faf80746c6cbf621dd1a990748e72455b32ccb438a981d47cc7
SHA512

ae082401ef7c01b698e1ae29b69ad6d872abdff9b8cf2b7d0ef1ee42eaad6d181b9129b31dec8e9a647a3ce9fae26be59614bca854f55e549da6b932cbed53e0
SSDEEP

1536:4eVCdRU55+wDvbXISFGQ/lwdCKRbNxw1s+oL/fp:4eodRU55ZDzX/FGclkCKBvN95

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4487d2d95fbd5f8052d9dee0029b0641_JaffaCakes118

Files

4487d2d95fbd5f8052d9dee0029b0641_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b537893b978bf62ac8dc16435239d5f9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetNumberFormatA
GetSystemWow64DirectoryW
OpenProfileUserMapping
SetCalendarInfoW
UnlockFile
RtlCaptureStackBackTrace
QueryPerformanceFrequency
SetCurrentDirectoryW
GetTapeParameters
ReadConsoleA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE