628385a608b7038efbcbddd7ed5eced1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

628385a608b7038efbcbddd7ed5eced1_JaffaCakes118
Size

63KB
MD5

628385a608b7038efbcbddd7ed5eced1
SHA1

e50034c4d1f631ee7ae56d2b4bdc488a1764a8ec
SHA256

620c948f0f5d6b6e7481540a9b80e350213d103205a8b96414eac4fb6b1cbf76
SHA512

9108fe41f6989f93b995196a41b7d32c202793d780da6312077d49602841c24d0e90bdd050e903a3fe7af3a3cfc6c53f6a8650f2a791b06808776031d271171c
SSDEEP

1536:SSsI5cUC3dsMCyQoOLIwTlatJXIPnI6jGe5aKafqNftdqE:X5tCtsMCFoqlatJ4Pnrj77q6FsE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
628385a608b7038efbcbddd7ed5eced1_JaffaCakes118

Files

628385a608b7038efbcbddd7ed5eced1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

adc8c8e28f6860da26e01e03c59cc107

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumSystemLanguageGroupsA
VirtualFree
BaseDumpAppcompatCache
GetConsoleDisplayMode
GetProcessPriorityBoost
ReadConsoleA
GetConsoleDisplayMode
CopyFileW
GetSystemDefaultLangID
CreateEventA
OpenProfileUserMapping

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE