d47424d7cb2ce14c98e625c59beaf796_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d47424d7cb2ce14c98e625c59beaf796_JaffaCakes118
Size

33KB
MD5

d47424d7cb2ce14c98e625c59beaf796
SHA1

96e293a02009a7d503fe4c61e9240d7c843a6d57
SHA256

33328ba718f50942f553ad42ae31723b1380dfeb664f9b81753b70dc4a2d6010
SHA512

a9dc6650f26c56557580de83442dd0be393f66fca3889764b0a93486f9de4705545fbd04216586994a6a305d4595a8ace8cf5bb9bd5e55180f82b098cc4d72a4
SSDEEP

384:hYsp1qnkwpnE1qqCdOKtQ939MKQBw22YZo+buYh717Qout6K5t0qIUtyB4Z1:hlbqkwpEMOK69m8+HX7Q3xWqIUtvZ1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d47424d7cb2ce14c98e625c59beaf796_JaffaCakes118

Files

d47424d7cb2ce14c98e625c59beaf796_JaffaCakes118
.exe windows:4 windows x86 arch:x86

42e7c14ca48123966bb2bc209b151b7d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__osver
__p__winver
__toascii
__argc
__doserrno
__threadid

user32

MessageBoxA
MessageBeep

kernel32

CreateWaitableTimerW
CopyFileW
DeleteAtom
EnumCalendarInfoExW
DeleteFiber
FatalExit
CreateFiber
GetLastError

Sections

.text
Size: 20KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE