b63f98892b829b133bb44c5432996159_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b63f98892b829b133bb44c5432996159_JaffaCakes118
Size

56KB
MD5

b63f98892b829b133bb44c5432996159
SHA1

248f803dd223f68ae23df9c4bcee8ca4499a72a0
SHA256

1e42ab1de6aee989016e80697eb0a1e8dada3f87bf247a1683be185e22271874
SHA512

ba8f3e8cad8fd835e2c55a0ea05caee4b0e9eb118c8fd24b84a36c0903a431926e1bbc61d0087debf91e86fa3f672cd660707422b84b743762843acbcbfe0ffa
SSDEEP

1536:7dmEBvabjMu1XYRkO0gaAU5kSTrEQeYTFdaAmIoQo:tNanMEkZ0vDBTrreajanz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b63f98892b829b133bb44c5432996159_JaffaCakes118

Files

b63f98892b829b133bb44c5432996159_JaffaCakes118
.exe windows:4 windows x86 arch:x86

66281e24b0991826a0dcdb5516c86040

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetNumaAvailableMemoryNode
LoadLibraryA
GetBinaryTypeA
LocalReAlloc
WTSGetActiveConsoleSessionId
CreateDirectoryW
EnumResourceLanguagesW
SetFileValidData
GetSystemTimes
GetConsoleOutputCP
DnsHostnameToComputerNameA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE