4b8deb58ca099b20ed52862a05575458_JaffaCakes118 | Triage

Sharing

General

Target

4b8deb58ca099b20ed52862a05575458_JaffaCakes118
Size

95KB
MD5

4b8deb58ca099b20ed52862a05575458
SHA1

7c9e8936ab66cf9493e49574fbfd34be7689682f
SHA256

57d90bfcbb72548595ffd07abbc141bb9accc1a0dd40eb41ec3ff989bdb9c18b
SHA512

5e2dcacf8759373c8343472741fbb89c60cb776982476508aa68195d53e4b2e6e36d52dfe1fd2958785137de795684c93f612d431ff3ccda95b196fd3c6df0c1
SSDEEP

1536:nyjLh4jOr/Wtvg3fuPH9+XO54DGlRVi/UjmhA1kqm5sENZc6Cw4ofM4CgN2:yjLh4+wmfuPd+XO54D6m5sENuifg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b8deb58ca099b20ed52862a05575458_JaffaCakes118

Files

4b8deb58ca099b20ed52862a05575458_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d73e0d368e0e1568832145f2d9b614b4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleActiveScreenBuffer
CreateToolhelp32Snapshot
GetSystemDefaultLangID
FileTimeToSystemTime
CreateEventA
SetTapeParameters
SetComputerNameExW
Module32Next
CreateDirectoryExW
GetConsoleScreenBufferInfo

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 81KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE