da60b0f17e7f36339730284a39e7851a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

da60b0f17e7f36339730284a39e7851a_JaffaCakes118
Size

276KB
MD5

da60b0f17e7f36339730284a39e7851a
SHA1

f073bac50fb8d60c8c4f145ac49eee18a3bb2f33
SHA256

5696c9333294ce6ceb1cc43669c70b10038fe6ef863d7f5a1dc579b47bcea240
SHA512

fc98f95ed17b677299720aa8cfea928a40fa4065a24e15824be480544e3ab968fc720a2df20e6d260b93517e14149203b9add83d4780723605a32583f1fb4d80
SSDEEP

6144:77TroKnfy2SlyKonnd3zufxRaZIvSnE0:hfy2eU3zkaqvGE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da60b0f17e7f36339730284a39e7851a_JaffaCakes118

Files

da60b0f17e7f36339730284a39e7851a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bc592f93a5af05596ed5686326afbfba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumSystemLocalesW
GetCommandLineA
TlsGetValue
GlobalReAlloc
lstrcatA
GetAtomNameW
GetDateFormatW
CreateProcessW
VirtualProtect
EndUpdateResourceW
GetModuleHandleW

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.megrsrc
Size: 228KB - Virtual size: 228KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ