765d4adebfc20bad45847bda7e8ae9fa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

765d4adebfc20bad45847bda7e8ae9fa_JaffaCakes118
Size

62KB
MD5

765d4adebfc20bad45847bda7e8ae9fa
SHA1

d20615774844f76349a411e4b4425624f925314a
SHA256

80afd29088b313f486c0f952ec6a3136d25606006cecdcdd047532f0a657f890
SHA512

094d38aed61971a7bfcabb06b317ffa408f4886e26177bfa4e8a6adafdfba88278cc236ad13b1c7bd7cdddb899082ed5d59237910603aeddc6bbc950b8562dc5
SSDEEP

1536:kb5LfSuhs81/xpd+gqdjW6o679ENTZbq7JrHx05PWns3zNxRYP:kdfSu681/xp8w6o679ENTZbSJjK9pMP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
765d4adebfc20bad45847bda7e8ae9fa_JaffaCakes118

Files

765d4adebfc20bad45847bda7e8ae9fa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

48c6730b069fb30165ed3fa459078e26

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrencyFormatA
lstrcpy
WritePrivateProfileStructA
SetEndOfFile
EnumSystemLanguageGroupsA
VirtualQueryEx
FindActCtxSectionStringW
GetCurrentProcess
DisableThreadLibraryCalls
ReadConsoleOutputCharacterA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE