70012e5af48d330cd7841c1b17663779_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

70012e5af48d330cd7841c1b17663779_JaffaCakes118
Size

63KB
MD5

70012e5af48d330cd7841c1b17663779
SHA1

55647fcacdbdb065ded1463e9f402c742d8aa35d
SHA256

dd1cdcc675c53b6e305924f8ac83113568b2fbad8bcbba84bde591a1bbcaf8be
SHA512

1f89d321f033e23e1881e03badbfffc005fcb4aa1f8795473bad09790e928af82b7fc70cabbb1190e4a2ea51c13a16328b6257d82cbb5851a0fbef4eb4d6dbc9
SSDEEP

1536:k7cEf/D6ZkSzuGQwfYNIfKZsqi59IF2i0k0W4Oe2XfQos:WHCkSpbQNw7r9W4Is

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70012e5af48d330cd7841c1b17663779_JaffaCakes118

Files

70012e5af48d330cd7841c1b17663779_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f35023c164e79cc2e3332b9967e83b5b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LZRead
CreateTimerQueue
GetCommProperties
GetProcessTimes
GetPrivateProfileIntW
CreateWaitableTimerW
LockFileEx
GetEnvironmentVariableW
GetPrivateProfileSectionW
PurgeComm
GetCurrentActCtx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE