4c04d79f297cb4dbfaa664a250fb0b31_JaffaCakes118 | Triage

Sharing

General

Target

4c04d79f297cb4dbfaa664a250fb0b31_JaffaCakes118
Size

56KB
MD5

4c04d79f297cb4dbfaa664a250fb0b31
SHA1

6aca534b4ee84f28f6f17a7fdad00e3a5bb24c10
SHA256

55010172d02b737fa00824a36f07853d3a01f797740db8027ff5f032e108b6d3
SHA512

57c64a02fe87bc686ffed698b98ac209e258b83d157dbecf22443b89d3d12ff47c7000f480794639852911952417e09eff0e4068f3ca6b62b79cc1fef1acef88
SSDEEP

1536:JQvy7kPn9uBdnzprdGggmskNyifi6s0c0aFtBIbUETtcIBWE3:sy729uBdnbbvN5jaFteTdB93

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c04d79f297cb4dbfaa664a250fb0b31_JaffaCakes118

Files

4c04d79f297cb4dbfaa664a250fb0b31_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cf7f84b497b9a338d7406692851363cb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RequestDeviceWakeup
GetTimeFormatW
DefineDosDeviceW
BeginUpdateResourceA
lstrcat
PostQueuedCompletionStatus
RegisterWaitForInputIdle
WritePrivateProfileStructW
GetLocalTime
DeleteVolumeMountPointA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE