720e7b97820c8b1ccf7f5a79eb644dab_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

720e7b97820c8b1ccf7f5a79eb644dab_JaffaCakes118
Size

63KB
MD5

720e7b97820c8b1ccf7f5a79eb644dab
SHA1

11fffbbfe15e6eaddba451c39ff335f1bf0fcf6c
SHA256

69aee3040d544537d099b5147f61a81777ccbd29c4aa52eb1c2d9b3811e3c0bc
SHA512

784ec37cb0b4ef87bc17bf9dc284e16dfc0937e71fd497da9f5fe167b1e4858a76f4b1f158943970ec602292977e398169e1c4b0e25e289a99ec463c454b5ef1
SSDEEP

1536:OwZ6qp0quhk+cw6CowmSNipshrywl84eE7g1cDMxU:1kqKqakaD/NipshrTl1K1cSU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
720e7b97820c8b1ccf7f5a79eb644dab_JaffaCakes118

Files

720e7b97820c8b1ccf7f5a79eb644dab_JaffaCakes118
.exe windows:4 windows x86 arch:x86

135c8ccd6163d553a0bdf76181e3e524

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindActCtxSectionGuid
GetSystemTimeAsFileTime
UTRegister
GlobalAddAtomA
GetEnvironmentVariableW
SetErrorMode
SetSystemTime
GetWindowsDirectoryA
AttachConsole
SetNamedPipeHandleState
LZCopy

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE