c13f3bedb9be2ef14e4776aa8cdd0caa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c13f3bedb9be2ef14e4776aa8cdd0caa_JaffaCakes118
Size

62KB
MD5

c13f3bedb9be2ef14e4776aa8cdd0caa
SHA1

ffcc534917de92f2c3ab1d66b2d20170db1355dd
SHA256

7603c5eb66857317c9a8a7494699cb4689f41b38f0e6afd9a3533c6bd6df2925
SHA512

20a3cf3a5318f990a284959b5f7863db9fbdfd9673a5ad42e64af9aeccd878baba7d2f4324f1a0aac1a95f156eaf4b069a3821d8c72085aa4cd74751bfb24d1a
SSDEEP

1536:abcT9txo3nh4erT2QN+7YI2Gw/zd0ZrDaBRNq:abKSuerT2QN+MIQKZqXo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c13f3bedb9be2ef14e4776aa8cdd0caa_JaffaCakes118

Files

c13f3bedb9be2ef14e4776aa8cdd0caa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

82ab8748b9ce343e7b88f06670e8bafb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapExtend
GetSystemWindowsDirectoryW
EnumSystemLocalesA
LZRead
GetStringTypeA
FileTimeToDosDateTime
GetExitCodeThread
TrimVirtualBuffer
GetThreadPriority
CreateSemaphoreA
LocalHandle

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE