c198ea12b60b705b86b4e3ca917b59d2_JaffaCakes118 | Triage

Sharing

General

Target

c198ea12b60b705b86b4e3ca917b59d2_JaffaCakes118
Size

115KB
MD5

c198ea12b60b705b86b4e3ca917b59d2
SHA1

7f9a08a9980f4551d19e025575ed775fa8f082b9
SHA256

6470eb956d528a1c741933328546ae90ee8bc80722a1867c6ab993ae099e0ea3
SHA512

be5e34616492348092c3df202b6afb75e9991c79e16dac0b7ca70f726bb2f1368b3991cf5a3846d49ca9c7ec8dd4a8697190cabc730c906a994c3f9ff010c804
SSDEEP

3072:d/fSxh1KSdTLQrgB/d5GHep3ELUnWyB+mNORDyd+zaTscblCZV:dixzK+LQrSd5nRELA+mNmDyda2JCZV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c198ea12b60b705b86b4e3ca917b59d2_JaffaCakes118

Files

c198ea12b60b705b86b4e3ca917b59d2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

abee0f1dfa2adf18cf327e1f82c55d5c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenProcess
LocalUnlock
SetCalendarInfoW
HeapFree
GetUserGeoID
GetSystemInfo
GetSystemTimeAsFileTime
SetCalendarInfoA
GetProcessHeaps
WriteConsoleOutputCharacterW
OpenWaitableTimerW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 101KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE