63f3dd7a798ca1a6326f30f083f2498a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

63f3dd7a798ca1a6326f30f083f2498a_JaffaCakes118
Size

76KB
MD5

63f3dd7a798ca1a6326f30f083f2498a
SHA1

0102432ccbc7ec1caa297d7862d7a6654bee0792
SHA256

abc9729fb6b21e126cca0c642b966e0a50e701fd455da0c13284dea11856443e
SHA512

163f713a02d40d0be19e01ddef28c074edfa80e1d6d863b72258988a6b845ced1c4b5b83460673e4c8a904eda44d92b83b1b4519572da17916a8db19d87cc192
SSDEEP

1536:wxVpMmOQaS+Ih57x0pssDDeKoJAusPVeneqk3UbyVjEErxTWDTMqhGKYIZTET8x:S2c+sH4bHeWusPVenA3XjBkMqhGKZTbx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
63f3dd7a798ca1a6326f30f083f2498a_JaffaCakes118

Files

63f3dd7a798ca1a6326f30f083f2498a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dad7747e40d126f54bba0d3c616c16a3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileInformationByHandle
GetFileAttributesExW
SetThreadLocale
InterlockedDecrement
RegisterWowBaseHandlers
GetSystemInfo
UnhandledExceptionFilter
GetFileAttributesExA
HeapCompact
SetFileApisToOEM

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE