8324585e1de497c96ea8457e22796b7d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8324585e1de497c96ea8457e22796b7d_JaffaCakes118
Size

83KB
MD5

8324585e1de497c96ea8457e22796b7d
SHA1

f40139c255e06a2787a370e1e19aa7c2dac38089
SHA256

d8211cc9f52e2b6922c224318ec91700bf63014f4dca42feac657b1e349f5156
SHA512

430a93ec0246f187241529d5ef0de8f706f383e01a37712a7eea4909915f790d873b31ffb94e46381b47aae97327db625930d5b8b8404a5c4fcf6234ea3a8f67
SSDEEP

1536:Uc8dOXUlxQlbWiPQtZ3Q4d/wV1slDqqBfnYSOI0jEErxTWDTMqhGKYIZTET8bDQ:lXUclbWiPS9d/wHAlVO7jBkMqhGKZTbY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8324585e1de497c96ea8457e22796b7d_JaffaCakes118

Files

8324585e1de497c96ea8457e22796b7d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d98e979e1df9a0ba98957701c8b131d0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProfileSectionA
EnumSystemLanguageGroupsW
FindCloseChangeNotification
SetConsoleCursorInfo
ExitVDM
LoadResource
CreateJobObjectW
GetModuleFileNameA
GetCurrencyFormatW
GetSystemDefaultLangID

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE