62a4f26925505fe01d0182994cdeaa3c_JaffaCakes118 | Triage

Sharing

General

Target

62a4f26925505fe01d0182994cdeaa3c_JaffaCakes118
Size

83KB
MD5

62a4f26925505fe01d0182994cdeaa3c
SHA1

690cca017463a59f126fca4d6566c9d9b0a4062a
SHA256

787618905aa7bd28d9547abab8f3d43bc3d250a7b46f5d55a0789d0005053033
SHA512

120f6251d78dfcec5b5ef60faef8134985e10e411caf96bc313285f426452215218d1a84c3a1045dc2f81ecf3a40a659986cf5840a7da4dd8fe50853c656c6ce
SSDEEP

1536:tdeNixvWBOTUeEfFs31qi2m7yjGeiQ2K2zkWKC4aaKjEErxTWDTMqhGKYIZTET8Y:6SQ2tzkHFKjBkMqhGKZTbbc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
62a4f26925505fe01d0182994cdeaa3c_JaffaCakes118

Files

62a4f26925505fe01d0182994cdeaa3c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dba7e82e03b9529b18df8c2c9f26c056

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SuspendThread
SetCriticalSectionSpinCount
GetProfileStringA
GetPrivateProfileStringW
SetTermsrvAppInstallMode
GetEnvironmentVariableA
SetTimeZoneInformation
VirtualQuery
Process32First
EnumResourceNamesA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE