46c548706189e813a7f6211b1decc35a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

46c548706189e813a7f6211b1decc35a_JaffaCakes118
Size

69KB
MD5

46c548706189e813a7f6211b1decc35a
SHA1

aa4a265bbf23e6d203c2f169715c9de66b17d7c6
SHA256

5a8a6700e19d818d101a2ad042ec8bb37efba771ebe279530affe82cf81bb205
SHA512

1357043b64a928d8e9006e81bd145619c7a1611769680fcc4ef62a07a6a0793d0230df651514ddd2f94c717992999fa1a09eff6a17f561f2ac3a9bfdcbb2e76b
SSDEEP

1536:Lc888CmiHJbRhd+bmPt/aCS9BgsqjEC2kO5bxwah82ZHQIMevBd:e17d+P9EjErr1waPvj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46c548706189e813a7f6211b1decc35a_JaffaCakes118

Files

46c548706189e813a7f6211b1decc35a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5e153f963044e17738eed37d2ae0fad1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SystemTimeToTzSpecificLocalTime
SetVolumeLabelW
TlsGetValue
GetCommModemStatus
SetProcessPriorityBoost
HeapSummary
VerSetConditionMask
InterlockedPushEntrySList
FindFirstFileA
DisableThreadLibraryCalls

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 55KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE