724b38c47419780f2e8932edb41a72ee_JaffaCakes118 | Triage

Sharing

General

Target

724b38c47419780f2e8932edb41a72ee_JaffaCakes118
Size

76KB
MD5

724b38c47419780f2e8932edb41a72ee
SHA1

2d18fbcf2b93e1eea499a73c8305c22c9db8fdfb
SHA256

2cc2acd8938e308565c1098a7595b94333a8cd7598f65bdc35ddbab3e5d567af
SHA512

2e52762f1f58c1874cd0f6cac00f630d5d3e7fb71e3f782499f5431bc64b47223bc67a886aee0a6dfdc1573fff1de671bbcf46db27904443a6cd15c888a96c33
SSDEEP

1536:X+CWNjtpM/K5cSavSVT5wykOHzVCK+pr+wiUXAv148Nf1BnJNP7dcF:vuLM5Vc5wkVH+JOFnNf1NjdY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
724b38c47419780f2e8932edb41a72ee_JaffaCakes118

Files

724b38c47419780f2e8932edb41a72ee_JaffaCakes118
.exe windows:4 windows x86 arch:x86

25670fbdd450e34f0f99e8fcaacbe76e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryW
WideCharToMultiByte
SetThreadLocale
WaitForDebugEvent
GetCurrentProcess
GetFileTime
UnlockFile
ScrollConsoleScreenBufferA
CreateWaitableTimerA
CreateMailslotW
GetDevicePowerState

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xrdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE