d6cb0d06729476645c4ef806b262ad21_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6cb0d06729476645c4ef806b262ad21_JaffaCakes118
Size

56KB
MD5

d6cb0d06729476645c4ef806b262ad21
SHA1

6a51c057d896e3b4a2069549dbd9fcc942f4776d
SHA256

3c5cbe7e55c5cf1e23d32df187f5a962df1993d9ced53e9e3c352873273135b2
SHA512

5a8792b2ad4fce98a31f905336126c2165d91e66a4a6269fffbb1619bcb7a7ac9058c3d0a7716d9878775f134778d691b949d00c48b21b9d7fbe0772a798f184
SSDEEP

1536:l3ZXGTMERKtDVJzyazGtQLOS8eiMSshvTzjUh6EA:nWZKtjzreQLOHszxZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6cb0d06729476645c4ef806b262ad21_JaffaCakes118

Files

d6cb0d06729476645c4ef806b262ad21_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a863b549808883f86d002478670040f5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExtendVirtualBuffer
GetSystemDefaultLangID
SetConsoleScreenBufferSize
SwitchToFiber
GetEnvironmentStringsA
EnumDateFormatsExA
LocalSize
GetCPInfo
VerifyVersionInfoA
SetLocalPrimaryComputerNameA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE