84c32f0a42c117d39ce2b395ab6c315a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

84c32f0a42c117d39ce2b395ab6c315a_JaffaCakes118
Size

63KB
MD5

84c32f0a42c117d39ce2b395ab6c315a
SHA1

9ec09b47dd582b88533716ffc8133064451c4f76
SHA256

f68de4e04b6c6713a50727567982ea646b3d32ca12d6c3455892be69b787aac1
SHA512

84fcbdf2e0f5d058c7021af023f2e7ade193cfb9c8bfafa88f7152c0d91c38c9684cb7779db58c654dec4e0f7ab53b6411da926dfd99548d121d501bd87e19fb
SSDEEP

1536:DyQRqc5OB5sHTOF9TAQYmuf+YrTvnbeyIVYYcsr:DfQok5sHTYTxK+Ynvbe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
84c32f0a42c117d39ce2b395ab6c315a_JaffaCakes118

Files

84c32f0a42c117d39ce2b395ab6c315a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

49c28879ed01343fef3cf7765da125ad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BaseFlushAppcompatCache
WriteConsoleOutputA
EnumTimeFormatsA
_llseek
_llseek
GetFullPathNameW
FindFirstFileExW
GetVersion
SetupComm
Sleep
GetComputerNameA
GlobalDeleteAtom
CreateFileW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE