624da11f3c532e99261120edc319a336_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

624da11f3c532e99261120edc319a336_JaffaCakes118
Size

67KB
MD5

624da11f3c532e99261120edc319a336
SHA1

b7d237a66dd9a81a71c001628a16843eb8af415c
SHA256

ebbf2b3c86fc7bc3907e0bc138dcd2db7181f210ba35297a611cbf5fde8dc756
SHA512

4e4b15839803c5ab2cd087cdc444543c0bd054a2f9aa9429d10b94f9c2f475c02b628b5d26d018cc9989cd707af187ca184b174117b7cc8e78c1fcb2f2361905
SSDEEP

1536:vI1yogIDfqfImuv9FrUYSSWMNcdURHALc57+3aHSIzH2G2xK:gpfkImO9FrxfMdU5ALcMSpzWNxK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
624da11f3c532e99261120edc319a336_JaffaCakes118

Files

624da11f3c532e99261120edc319a336_JaffaCakes118
.exe windows:4 windows x86 arch:x86

881f849a49c0f6ecf94f0f25d99fa05c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadCodePtr
FindFirstFileExW
GetProfileIntA
CancelTimerQueueTimer
SearchPathA
_lopen
SetCriticalSectionSpinCount
CreateRemoteThread
EnumUILanguagesA
BaseUpdateAppcompatCache
GetProfileIntW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 52KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE