782e6f34bdd6e74848e86e58f807802b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

782e6f34bdd6e74848e86e58f807802b_JaffaCakes118
Size

86KB
MD5

782e6f34bdd6e74848e86e58f807802b
SHA1

97a79d03a5e17c9ba52ba610798915440f8b3b05
SHA256

acb88003c8cf5c0dc69b4ebb8f5a60bedfb7f477eb41dac4e7c699df4bf09b60
SHA512

8507e2aa025de7250a550189df00ab17f1d213de0e63682578154a3f8ac855cbac854bc29083c03bec302c8cc13d196cdadb5b9313a9c17bfabfe3be807106ec
SSDEEP

1536:deS5+ti3ET2dBl+hKJvw85/wNCxoRBHTCe29SNf1BnJNP7dcf7T61s5Varlj:R5+ti0CMKJvb/0CxcVr29SNf1Njdw7T4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
782e6f34bdd6e74848e86e58f807802b_JaffaCakes118

Files

782e6f34bdd6e74848e86e58f807802b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0dbac93d4a04781dda0ce67e8e05ad85

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetupComm
CreateActCtxA
WaitNamedPipeW
lstrcpynW
VerSetConditionMask
UnlockFile
BuildCommDCBW
SetCalendarInfoW
EnumTimeFormatsA
GetSystemTimeAdjustment
GetTapePosition
EnumCalendarInfoW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xrdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE