633df77ceed10c52440708a4f96bb28b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

633df77ceed10c52440708a4f96bb28b_JaffaCakes118
Size

63KB
MD5

633df77ceed10c52440708a4f96bb28b
SHA1

6a80e59dfeb5bdb998788e6ab49876fd77ef1ccf
SHA256

01c4eb75a3295cca333469700b5247dd782795ef0f56e48105d3094d3f275994
SHA512

da0bc7d8a99d7de9daedbe938c5b69cca7edf3916b17d04c6d9e959b675f0b9de22c63d4f3f0b4e8b8339a11d68390fffa9b44cecdaf3e88a62ca0eaec4dd0bd
SSDEEP

1536:8WvEfXYS7TMDkiUj9V0HBCs4OaV5KZUEwhvtIqCzF2:hQTMSDCNwgZ2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
633df77ceed10c52440708a4f96bb28b_JaffaCakes118

Files

633df77ceed10c52440708a4f96bb28b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

730a8b2d537a58b7da55d3a7bf576836

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueryDosDeviceA
ExtendVirtualBuffer
IsValidLocale
SetCalendarInfoA
HeapWalk
SetConsoleOS2OemFormat
GetUserDefaultUILanguage
WriteConsoleOutputA
SetConsoleTitleW
GetAtomNameW
GetFileAttributesExW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE