85d9e0a62b326050aad63f47484b83e0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85d9e0a62b326050aad63f47484b83e0_JaffaCakes118
Size

66KB
MD5

85d9e0a62b326050aad63f47484b83e0
SHA1

5a89c5734273ee9d0bd8a4e875abed7bf8e3ff36
SHA256

c1fcea7b3c447f97a7b2abd1002ddc587617e816d4525cb7aaf4bd355e3adf66
SHA512

4bd67062ddf377fbb5478cc728f74cfbeab92863aed9917ff2bbc2f1da6aef6f9aa758d94c1f7a74b0e1dfee2e41f8b9e3bb1f8e19ada688aa5f6e09bcac6dd9
SSDEEP

1536:ViC14xL1+7r7k/ILMBW2QHgDB5MuYLzStlp+hnhp:owL7r71MB5QHglRYLzStlp+h/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85d9e0a62b326050aad63f47484b83e0_JaffaCakes118

Files

85d9e0a62b326050aad63f47484b83e0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c3853cf6aff0f81185250b1e9762c182

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ClearCommError
EnumUILanguagesW
EnumDateFormatsA
PrivMoveFileIdentityW
ExitThread
LoadLibraryA
OpenEventW
AllocConsole
Heap32Next
FileTimeToSystemTime
SetUserGeoID
lstrcpynA
CreateToolhelp32Snapshot

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE