da2087ce0edc32cf1fb29322b0582124_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

da2087ce0edc32cf1fb29322b0582124_JaffaCakes118
Size

66KB
MD5

da2087ce0edc32cf1fb29322b0582124
SHA1

826dfd7a0c2000fa3bc096ac049a80c62e231c27
SHA256

fd309220faed3cd94f445164fbf1a2dde685382a1977d46cc3dbddb596d32b3d
SHA512

526bd1ec38a6c7b9634c79440fa16c0155496848da3c25dcfeac63061b3d0086beff711957e7fb7adf21e46ac712acde3a5c17fe5aa80fc078c79984e61fe57b
SSDEEP

768:wd1JKKq2Bg6CbA2BZlWloMTXRsS2PXmnbJj1H9r4f8ujgevcfvAOR0OWLz3mMO2a:61JKZAvzvn28I0fIOR01LzzH3XuhTUe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da2087ce0edc32cf1fb29322b0582124_JaffaCakes118

Files

da2087ce0edc32cf1fb29322b0582124_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1acb320ac19dea1e8ebd8bc2bd207b07

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SuspendThread
GetUserDefaultLCID
WaitNamedPipeA
RemoveLocalAlternateComputerNameW
GetThreadSelectorEntry
GetCPInfo
EnumTimeFormatsA
SetConsoleHardwareState
MultiByteToWideChar
GetConsoleAliasW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 52KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE