b7c0037b5cc4fba3e5612d01a42c0661_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b7c0037b5cc4fba3e5612d01a42c0661_JaffaCakes118
Size

76KB
MD5

b7c0037b5cc4fba3e5612d01a42c0661
SHA1

7f702bb01399c1509756f2bc339163b78c1de125
SHA256

c1b44bd012444a38ecd4eeb9791216975c141f1335b510a3a01df417c9b9191f
SHA512

c481ab1b94e692108db1d7f8a8a70fdd9c8876ca4ff7cd0e928f6326768c73db1fce3ac7e68617c4fbcea9af856b981d58a94f665375d0e4c005e2f16cd8abe2
SSDEEP

1536:IAMkZom1ByUW9wkkmw+fd0BvXYHDbUmxjEErxTWDTMqhGKYIZTET8x:IaZom14Nd+hoHDAijBkMqhGKZTbx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7c0037b5cc4fba3e5612d01a42c0661_JaffaCakes118

Files

b7c0037b5cc4fba3e5612d01a42c0661_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0ec80953f930a562334713cf88b7d801

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetWaitableTimer
GetNumberOfConsoleInputEvents
SetMailslotInfo
HeapFree
PrepareTape
SetConsoleOutputCP
GetTimeZoneInformation
UnregisterConsoleIME
MoveFileWithProgressA
LZSeek
FoldStringW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE