684a6cd964834e13d6ecca976780e2d2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

684a6cd964834e13d6ecca976780e2d2_JaffaCakes118
Size

56KB
MD5

684a6cd964834e13d6ecca976780e2d2
SHA1

0943a0213c2bd5ecde6863c77a2d712536510b87
SHA256

cf911a58781a67798ae406d5b7917b7220037ca6288359cbd49b58f3f8bb3bea
SHA512

7eaf7f9970c2e98c3cb006e4c6d62a572f770beee1fc0cc98251ca01ce46b6e6c6a710c1def0c66d275a9383d83db27d41ec0b300e0de3aa68e48f722783c7e8
SSDEEP

1536:XqZj06zwmHCJFFStnpCKS4QSfqkWwq+EoNdpWvg/gwGw:XWjB0m2FStpC+QSL7f9DpWvagwGw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
684a6cd964834e13d6ecca976780e2d2_JaffaCakes118

Files

684a6cd964834e13d6ecca976780e2d2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

631f553e20e306fa6c8877f47c2fb052

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BaseQueryModuleData
SetEvent
SearchPathA
GetFileSize
VerifyVersionInfoW
GetNumaHighestNodeNumber
Process32First
CopyFileExW
PulseEvent
EnumSystemLocalesA
GetProfileSectionW
CancelTimerQueueTimer

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE