83546fac6136797df04d6e63cdb0f303_JaffaCakes118 | Triage

Sharing

General

Target

83546fac6136797df04d6e63cdb0f303_JaffaCakes118
Size

115KB
MD5

83546fac6136797df04d6e63cdb0f303
SHA1

e8d47b82827362906cfed2c57727462b18c4738a
SHA256

70200557a3010a7d34f78ce6c2a9fc7456068bf7e37856c9a37d8908eb14c68d
SHA512

63ecd20e6bfdc2dea68b15452207bc939f924f7a1584c89ed5ca7a8dd2dd565328aca8cde61f83e1d62ecd0af2fbabc7869f8404dd3c02acb3ee453b45f4565c
SSDEEP

1536:DGOhuD2NVkQNHRy2IqVs05uE4+D1wdQlsbJQkuDWhIn0rDDVSXWxhTB2qZ2goroH:rhukbBsUD1wdHNRlrvVLRBV5oA17

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
83546fac6136797df04d6e63cdb0f303_JaffaCakes118

Files

83546fac6136797df04d6e63cdb0f303_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cf28f95f05bdde7cd57cd389fd3f6e50

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MapViewOfFileEx
EnumResourceLanguagesW
QueryActCtxW
_llseek
EnumResourceNamesW
SetLastConsoleEventActive
LocalFileTimeToFileTime
GetBinaryTypeA
GetTapeStatus
SetCalendarInfoA
SetHandleContext

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 101KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE