483857cc04b83b11d03472f312046952_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

483857cc04b83b11d03472f312046952_JaffaCakes118
Size

14KB
MD5

483857cc04b83b11d03472f312046952
SHA1

46744091f12d5f993c976040427739168323a1fa
SHA256

17d8f36c27243295fb7784514442537146f75dc3906b83215863234936920570
SHA512

f774a196a6dd739a6fbf9dabbda1e7f30271025f72cfcee10d813ddb97e92d586ed440133a00cd488cd213c6a3a08cdb2151d6b4ea93f04957aeb1cabd44e5f1
SSDEEP

384:aM/Eamt8ph/UdTD/bh1q/OkO8WJwVMVVe/6YrsuqSq682jk+eEmsxeNC5krOJi33:ajophc1/bnq/Or5JwVMVVe//rsuqSq6g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
483857cc04b83b11d03472f312046952_JaffaCakes118

Files

483857cc04b83b11d03472f312046952_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f8fc05c152576f636abf0381ecf936e8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumCalendarInfoExW
EnumSystemLanguageGroupsW
ReadFile
RtlFillMemory
GetCurrentDirectoryA
EscapeCommFunction
GetFullPathNameA
lstrcmpA
CreateFileMappingW
GetDllDirectoryA
GetStringTypeA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE