4bfa8f38528eff97609f33a00df1ff64_JaffaCakes118 | Triage

Sharing

General

Target

4bfa8f38528eff97609f33a00df1ff64_JaffaCakes118
Size

119KB
MD5

4bfa8f38528eff97609f33a00df1ff64
SHA1

f3934aa4d477b874f350571d30692a7964b49396
SHA256

6bfc528ccdba329f5d40070b8fc9f54ee163ef179eebf25c1df0daf2ce1d859f
SHA512

c864624a1d242a791a218114509837749172e3f35a9c8a682ce7dd32b4f23169e84de481ce2b39bb49847edd3a6fd5ed0be8dcc1ddb163504b521f4463d4a350
SSDEEP

1536:lTp1xfmX+Ro8w9fY3MubufSmtnImtAcIcQiFmQOgiSZQQYpuKRSg1Pdc4Ew+h3cz:lv1PZwW3M+mt67yAQO5OqFSGW4lQ3qr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4bfa8f38528eff97609f33a00df1ff64_JaffaCakes118

Files

4bfa8f38528eff97609f33a00df1ff64_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f0766d06a85e4c096d7a7ff0860f083b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MoveFileWithProgressA
LZDone
EnumResourceTypesA
FreeLibraryAndExitThread
LZDone
ReadConsoleOutputAttribute
GetFileAttributesExW
GetVersion
GetPrivateProfileSectionA
GetUserDefaultLCID
FindFirstChangeNotificationW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE