4593c7e1c07831f833448bd99b538d46_JaffaCakes118 | Triage

Sharing

General

Target

4593c7e1c07831f833448bd99b538d46_JaffaCakes118
Size

84KB
MD5

4593c7e1c07831f833448bd99b538d46
SHA1

22aa7af61d4eeef2c330fc20e52a3d13cd9bbcbf
SHA256

3211e455328de11284a6a6a4e0f03523e56694a98c37fb2568970c7ed2ea0490
SHA512

61827075ee95884bf9bb372bfc1d265f9fd1a0e804a53b6e294b7bd7db5d6369445a03f330ae10076489f124346dabd13b240301125f70f9b4e5ee4c82027345
SSDEEP

1536:S2R+GAm7d+7kQdHSowobpEIDCYYwHYIyiBsLp18qdMfRYLLbc5qGvPn4l:SE+GACd+7kQoobvXYwH0UK7WRC0592

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4593c7e1c07831f833448bd99b538d46_JaffaCakes118

Files

4593c7e1c07831f833448bd99b538d46_JaffaCakes118
.exe windows:4 windows x86 arch:x86

996fc86cb618c4d9a3f57ee6885a557e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTimeAsFileTime
QueryMemoryResourceNotification
SetFileAttributesA
GetCurrentProcess
FreeEnvironmentStringsW
RequestWakeupLatency
CancelTimerQueueTimer
GetSystemDirectoryA
GetUserGeoID
CreateDirectoryExA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 70KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE