c1d1a45934e068544a671359a32cecca_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c1d1a45934e068544a671359a32cecca_JaffaCakes118
Size

63KB
MD5

c1d1a45934e068544a671359a32cecca
SHA1

af212268f07a3fa608e0e9003a7772f3e89ab81a
SHA256

6ddf3eb80d61a32eca4de02da12cd3f9f7a40d3dc0c4c5d096039a61e77c9b1f
SHA512

866faf3192dee55e45168e16551ea581a5090c55b79205fa9584ad13e3e8e13b3b40c6b8601a467ba2894f4c23df5139b365464561ad4f3242e56d07bf4cfb2d
SSDEEP

1536:kSYVjboDLVm61+3NC32cUwkYCNYY71yqmG:KVjb6VJiN7n1yqmG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1d1a45934e068544a671359a32cecca_JaffaCakes118

Files

c1d1a45934e068544a671359a32cecca_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d965655ebeee19fa11c6ba636ceccf15

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeaps
SetStdHandle
GetThreadTimes
SetVolumeMountPointA
GetVolumePathNamesForVolumeNameA
GetLocaleInfoW
FindNextFileW
CopyFileExA
GetConsoleAliasExesLengthW
LCMapStringA
GetProcessTimes

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE