d5afbb67ae0d1566732f6c5522b1df7d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d5afbb67ae0d1566732f6c5522b1df7d_JaffaCakes118
Size

299KB
MD5

d5afbb67ae0d1566732f6c5522b1df7d
SHA1

1a8f9bfdc96063e6839fc72db53dded92cb4392b
SHA256

f8e46283d43f1013d5cf4e4fcfae5033fc3d0fbfee5c248351a43139db6e45ef
SHA512

8a11f8d6d989e89c4f1497e08a7841788c2910bf106250ed8efcadec92a834a91c2035e81a709ae2165ca687104981d92e2b2137b6e287f45be19d4734e7b112
SSDEEP

6144:GKVcGK5i9sLAGDbnSyr6YSuRgec8VV6kzX84pY:GKKO99aDSyr61Igsr6OX8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5afbb67ae0d1566732f6c5522b1df7d_JaffaCakes118

Files

d5afbb67ae0d1566732f6c5522b1df7d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c214275d368fa49fcc477d2bea821521

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpiW
GetACP
TlsGetValue
GlobalDeleteAtom
CreateProcessW
EnumSystemLocalesW
GlobalFindAtomW
DeleteFileW
GetProcAddress
EndUpdateResourceW
GetModuleHandleW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 271KB - Virtual size: 271KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ