8583ee45c3e5e89686f532db0f3fdbdf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8583ee45c3e5e89686f532db0f3fdbdf_JaffaCakes118
Size

66KB
MD5

8583ee45c3e5e89686f532db0f3fdbdf
SHA1

780f7987f3f9fd247ff0819395fcd9a80971367a
SHA256

adc966fea11ce7058a1b18bb076f2332c3f380369d7dbe354d4a97baa70de3a6
SHA512

e52ff8fc71dc285d395e327c087fa5b7c2ed92b36638a3870df456c153eba2cdc37d1a4de620cc16017de715c00767245783b488570474eb3b66a00d7cf7cbd9
SSDEEP

1536:EcMIzNpqJszMl5XA8PE/uWZ74kJ1sd86WUz/upr:/dlMguWl441K8Yar

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8583ee45c3e5e89686f532db0f3fdbdf_JaffaCakes118

Files

8583ee45c3e5e89686f532db0f3fdbdf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fdbda5f381e931d7fa53f3346f9b5ac0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
NlsConvertIntegerToString
GetSystemWow64DirectoryW
GetLargestConsoleWindowSize
SearchPathA
GetModuleFileNameW
FindFirstVolumeA
GetSystemDefaultUILanguage
GetCurrentActCtx
ReleaseActCtx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE