697f1e5efa5e438c43f5c15d96ab1754_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

697f1e5efa5e438c43f5c15d96ab1754_JaffaCakes118
Size

67KB
MD5

697f1e5efa5e438c43f5c15d96ab1754
SHA1

b75c2b9a36fd493224734b970aecf02a3ed74874
SHA256

d952fef78d78b98d5a12f05e1e53b699607d5b1032363533b129f97009f8df85
SHA512

75f5fa4b05051ced1105e485546322c4c128088c5d6fd52e10da3b4e6dfde91fda822e932b0116d9598abf5aea06a3e9b86c563bf2887edbfbcfedfccf6ec7a9
SSDEEP

1536:lKkPrUF6ULKlxrPI63tkgrwCH+QDxdC4CESyON1IqgdOpE7K:zrFULgT3tkgr5+QS4CCOdgrK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
697f1e5efa5e438c43f5c15d96ab1754_JaffaCakes118

Files

697f1e5efa5e438c43f5c15d96ab1754_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c08ba5066e4bb7a995fcb970bf1596a4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleFontInfo
Toolhelp32ReadProcessMemory
GetGeoInfoA
EnterCriticalSection
EndUpdateResourceW
LocalAlloc
TerminateJobObject
CopyFileA
GetExitCodeProcess
GetCPInfoExW
FindNextChangeNotification

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 52KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE