84972f545dac025de04d1239eac344f0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

84972f545dac025de04d1239eac344f0_JaffaCakes118
Size

86KB
MD5

84972f545dac025de04d1239eac344f0
SHA1

ed9c9528bb89dc812bafde919ea3f45311a73fb2
SHA256

2e38648b5f9b95669abc65a974f7f1aa8fdbf200ffdad31789374be1c09f5974
SHA512

8a3c2662a8a6231b5979b5823b042016e8e133b1e4d04a77154fea8b7922b1e1fb1be6a63193db97b460dbdb590c1a6d2e40dc270ba29410bc790cbc2ff35e8b
SSDEEP

1536:donacH2/drKW68nSidWTcOlsD5ewHNC0ow2gn5Nf1BnJNP7dcf7T61s5Varlj:donaz/DzuTbls9LHNJ3Nf1Njdw7T2cV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
84972f545dac025de04d1239eac344f0_JaffaCakes118

Files

84972f545dac025de04d1239eac344f0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fc976b44d1dd30cbf684ae88d908b82e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MoveFileWithProgressA
LocalHandle
EnumDateFormatsExW
EnumResourceTypesW
GetConsoleWindow
SetThreadIdealProcessor
GetNumberOfConsoleMouseButtons
_lwrite
LZStart
GetVDMCurrentDirectories
CreateToolhelp32Snapshot

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xrdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE