700a1119db4c9ec3d8e6df5be1f932fb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

700a1119db4c9ec3d8e6df5be1f932fb_JaffaCakes118
Size

86KB
MD5

700a1119db4c9ec3d8e6df5be1f932fb
SHA1

10fae97b15281266c7129b1cb7c42bb3711e13f1
SHA256

ba9f1f5450ecddc132f9b09b6c6ed827479ae0f2ed4130008bcdcd75db767723
SHA512

c430dc8a2b11b36d40b238abf379501e0b965d837b8094f9873f48c725501d9bdc56c769829cfc47f57fe832891dd07ba484b6d8df1e6c5fbe83e167e3e7528c
SSDEEP

1536:95ItUy8zUTpl4akHAXWDtuzNmzulJglGjiD1LvNv2XNf1BnJNP7dcf7T61s5Vart:95IGmTphJVzYu+GmBhvoNf1Njdw7T2cG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
700a1119db4c9ec3d8e6df5be1f932fb_JaffaCakes118

Files

700a1119db4c9ec3d8e6df5be1f932fb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0ed4927ccc8b27ca488fe34b16d68094

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ValidateLCType
GetExpandedNameW
GetLocaleInfoA
AttachConsole
CommConfigDialogA
SetSystemTime
GetConsoleAliasesW
GetWriteWatch
GetThreadIOPendingFlag
InterlockedPushEntrySList
FindFirstFileExW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xrdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE