c0bb64fc0c9ea441cec9257e94ed6051_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c0bb64fc0c9ea441cec9257e94ed6051_JaffaCakes118
Size

56KB
MD5

c0bb64fc0c9ea441cec9257e94ed6051
SHA1

4c7ab7e2f615bd8c293e9db7a3ed67a427505d29
SHA256

f120f3f090543c41e9ef3e6c2ea1c82c2d495e1916579df35c6f7cc73897bc16
SHA512

069b94b011797aa03e4175ac57fb6cf4ff9682a3080bb7d0c82ad154ca7d2d3aded96a1c928e0e40be25c7e94b7603ed64c415a98f07ef53bf4d00d989c305a9
SSDEEP

1536:31f8JtbypKpDcVGn9CzDlOconFkpz0bO8Lsd:31EPyoCC9CNW+Qy8Lsd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0bb64fc0c9ea441cec9257e94ed6051_JaffaCakes118

Files

c0bb64fc0c9ea441cec9257e94ed6051_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b377f83ce92e6467cb07b01f928ee639

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
SetLocalPrimaryComputerNameA
GetSystemTime
SetProcessShutdownParameters
VirtualProtect
FindNextVolumeA
GetSystemTimeAsFileTime
ReplaceFile
WriteConsoleW
GetSystemPowerStatus

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE