d30679eb93b6ded4f8f46bb82d546022_JaffaCakes118 | Triage

Sharing

General

Target

d30679eb93b6ded4f8f46bb82d546022_JaffaCakes118
Size

83KB
MD5

d30679eb93b6ded4f8f46bb82d546022
SHA1

f97b1da54da0415d11a7281c713774bbbec0dc0d
SHA256

eb6df808f033873ed88cb7077148f4be2416cfc8868cb155b761c7cd1e9bf82e
SHA512

52969712d28c2d30ce58957d999c175f7c8e2445c1c19436f95db2e905fc026270dfd632d2cfd482b1035f6c1fecd55828e63a7072780ed2b4e2cbd569da26cd
SSDEEP

1536:a/zaMBgfjkAv8cynb8SronuXeTODti+bT1WKPqzEWGVjEErxTWDTMqhGKYIZTETr:SBYP8cQASr+ODk+v1TQEdVjBkMqhGKZg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d30679eb93b6ded4f8f46bb82d546022_JaffaCakes118

Files

d30679eb93b6ded4f8f46bb82d546022_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3824543e5595b2421dca455c1cd6bce4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetCurrentDirectoryW
SetThreadAffinityMask
WaitForMultipleObjectsEx
SetLocaleInfoA
IsValidLocale
GetSystemTimeAsFileTime
SetConsoleOS2OemFormat
SetThreadIdealProcessor
GetConsoleCP
GetConsoleAliasA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE