af7c2d9b19ce3d2dcbe45f9a7c53071d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af7c2d9b19ce3d2dcbe45f9a7c53071d_JaffaCakes118
Size

83KB
MD5

af7c2d9b19ce3d2dcbe45f9a7c53071d
SHA1

a8f23e0cbd7339528e4b8911d58bd322a6d06e41
SHA256

23592163dfd69c4bfbd4a312f07ac2c269a57da89f0e16e88f6658cf5d398c91
SHA512

761b4122a5c2df87884c3e7211227bc97bfc1b2f969039c66d80bc6047846e949f0babd7d52ba4514beb17e365e6c0ffda9e8ed3a7b743bef611eb3d3506bd52
SSDEEP

1536:RYnmfucSvlHdmwgu8Y5b5AJpE1EY1EssahZpjVrs2ryrd1vUQuqwcizSkX:RYnmGjLcQWg1nGssMHs2quciu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af7c2d9b19ce3d2dcbe45f9a7c53071d_JaffaCakes118

Files

af7c2d9b19ce3d2dcbe45f9a7c53071d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

75827f6d7aa1466a4ce7fe3d37a2bcb9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetTimeZoneInformation
SetComputerNameA
LocalFlags
SetThreadContext
ReleaseMutex
QueryDosDeviceA
AddLocalAlternateComputerNameW
DebugBreakProcess
GetNumaProcessorNode
WriteConsoleW
GetConsoleAliasesA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE