d685d9ccd4d2b9b419ccd633a8e17716_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d685d9ccd4d2b9b419ccd633a8e17716_JaffaCakes118
Size

115KB
MD5

d685d9ccd4d2b9b419ccd633a8e17716
SHA1

20cbec9c231a5825012e35553864c15ee8ba8e10
SHA256

7f83ab12177ce6602fc57ae12d337c3fe07a91f66346f94c3bc9f0a75fe76fc2
SHA512

ac3bae6039fa25de00bd7507960d22c1852c5ace33e625a403437dd8af7c843064d2659e28060683eb9f7cd306e6a0ceb91df5fcd4ccfb51c2230c4356b0c9db
SSDEEP

3072:X5TxQM+ADCC0AUq7J9KiMYKZJI16Y0L8Rzo3KGb0tt0E5:JTxQtADCnARFCYT1z0L8xo3hYME5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d685d9ccd4d2b9b419ccd633a8e17716_JaffaCakes118

Files

d685d9ccd4d2b9b419ccd633a8e17716_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d0561ced1503e428ba6873a13243580c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetExpandedNameA
SetComputerNameW
AreFileApisANSI
GetFileInformationByHandle
GlobalLock
IsBadStringPtrW
GetDriveTypeA
LCMapStringW
GetCPInfoExA
HeapFree
SetFileApisToOEM
PeekConsoleInputW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 101KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE