71eed572785b0bdbf0a1fa0184f3d205_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

71eed572785b0bdbf0a1fa0184f3d205_JaffaCakes118
Size

83KB
MD5

71eed572785b0bdbf0a1fa0184f3d205
SHA1

e8e3abcfdbc1dcfc48724e4809642b47470a2c1a
SHA256

2d0ee5f1728176a2565be6f3b97cc6cb8180ed96de1ac2f6f1d4254dbf93d4e3
SHA512

d2d895be5b11f48bedbe57d3451bebaafb1b08f1340127c39b8cb6d255b470b90e1c4b2c0a6892a0b1994c91e0ccca86faf0557f12d5be2bd255ad03c34d9b59
SSDEEP

1536:Oif8t9rzPj8IievlftMoE/6nYt23zC9pjVrs2ryrd1vUQuqPj:Rf8t9foGlMoESYtMzC9Hs2q1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71eed572785b0bdbf0a1fa0184f3d205_JaffaCakes118

Files

71eed572785b0bdbf0a1fa0184f3d205_JaffaCakes118
.exe windows:4 windows x86 arch:x86

134f64cc926e6d6ef098000cc833a332

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedPopEntrySList
SearchPathA
ReadDirectoryChangesW
SystemTimeToTzSpecificLocalTime
GetDriveTypeA
RemoveDirectoryA
CheckNameLegalDOS8Dot3W
GetFileAttributesExW
GlobalSize
GetEnvironmentVariableA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 27KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE