59cc0a4146cf9f07a8fc19e79b491a7c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

59cc0a4146cf9f07a8fc19e79b491a7c_JaffaCakes118
Size

56KB
MD5

59cc0a4146cf9f07a8fc19e79b491a7c
SHA1

24fc6a988a0e6a16d3768a3abf76918c2aa8e2af
SHA256

666beb7c0509521e69c18cc0d479a18ff36c94d641db8359d4fd97aa5130a422
SHA512

73cd7ab88ef95bdbe302aa6bcd56b4c725980e1a65bc8b1518cdbf606075bade62a52648f9309856a766d1f3b2b9a973fb8de97ec47b40d6af25ed0419d0127a
SSDEEP

1536:lRmt8JlsEi0fRrIOI6FW3zyX0e3SnidkuKtmHKzS:lQt8J5prIOS3zyXp3ShuKUqzS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59cc0a4146cf9f07a8fc19e79b491a7c_JaffaCakes118

Files

59cc0a4146cf9f07a8fc19e79b491a7c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

df8038016b359bee02c3a53625d06c56

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumSystemLanguageGroupsW
IsValidLocale
OutputDebugStringW
Beep
VirtualFreeEx
FindAtomA
EnumTimeFormatsA
LZOpenFileA
ReplaceFile
WriteProfileSectionA
FreeConsole
IsValidLocale

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE