d3fdba0d3a4817fd82f0523dc863ba05_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d3fdba0d3a4817fd82f0523dc863ba05_JaffaCakes118
Size

56KB
MD5

d3fdba0d3a4817fd82f0523dc863ba05
SHA1

8a7aabfe3946e8f4b9dee3c5c0a401afc64aa58c
SHA256

ee9ef01195d8c17dcc266226f7b6bae2fbd152a40a048d92559704e7383064cf
SHA512

53d4734c1709b7e84b7e3402596e319c9f7f0ceba75851febbc95a95410e418601a3ab144c42b64283b6bac82d7e8b97bb944c2fae2dc0f095ca43f6adb8c80d
SSDEEP

1536:04QDwPAAkEtTye1Sy5XbIlhE/Zdy74GBjaN0wgf:6DwI+Tye1LqM/nmW4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3fdba0d3a4817fd82f0523dc863ba05_JaffaCakes118

Files

d3fdba0d3a4817fd82f0523dc863ba05_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9614e6d12fbd3be14803402f069039b3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetACP
MoveFileA
GetComputerNameA
GetConsoleCursorMode
FindFirstVolumeA
FormatMessageA
FreeVirtualBuffer
IsBadWritePtr
CreateWaitableTimerA
ReleaseActCtx
GetDefaultSortkeySize
EnumCalendarInfoA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE