a7793afcfb2173150be85c5f961d9d69_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a7793afcfb2173150be85c5f961d9d69_JaffaCakes118
Size

78KB
MD5

a7793afcfb2173150be85c5f961d9d69
SHA1

0ed0bc910974bed74de450ec99e7de6f1ee391c7
SHA256

0c586b8f41f7e5898ff64cb7ae2bb9ec6af8e99d7bdf86fe56c52586829bf069
SHA512

6ac801494486f8ca3dc81f24220bd6a7e003d8ea62f2ae86fd3b10fc914e2c832fac514a34025adf03739b8d92a2e375a6038cbbc04eeadf743beec8be5dee88
SSDEEP

1536:04b4hIZqUGJvYW8Uu5ufEkaCRuwTxsPowz/5whM7NZ83YacIyP/69QAq4:F4GGJW5uEjtw9vQ/5dKYBbWq4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a7793afcfb2173150be85c5f961d9d69_JaffaCakes118

Files

a7793afcfb2173150be85c5f961d9d69_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fec18173bd9fe2d93512e2c7e78b5c75

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleCursor
lstrcmpiA
LoadLibraryExA
MoveFileW
CreateToolhelp32Snapshot
SetWaitableTimer
GetUserDefaultLCID
GetStringTypeExA
WriteProfileStringW
OpenWaitableTimerA
FindVolumeClose

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 36KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE