daa2a72d8246f5a84f7fe4af121ebd82_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

daa2a72d8246f5a84f7fe4af121ebd82_JaffaCakes118
Size

52KB
MD5

daa2a72d8246f5a84f7fe4af121ebd82
SHA1

15f2d4ddbe8260e4675a490f9909bd60a61e44e4
SHA256

0ff181aaf2df3c3837a67cbb82cb05f81f16e1c9ed1bbc2ae7398fe227e95b31
SHA512

fc946496a0f429c91e1a74eadc62e44898b7c6ab7937e9514cf8c5883845af23594dbc982df85186f271c719ff941697069e04a6a18e85fe818d02052af11a8d
SSDEEP

768:SiFeSyJ5BprXCWQQGfS1r138+IxS64Y6+ePyEEKeD5u7Uw:L2PrrXCWQQGfQr1381Sg6+myG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
daa2a72d8246f5a84f7fe4af121ebd82_JaffaCakes118

Files

daa2a72d8246f5a84f7fe4af121ebd82_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bfdef44ca5a4364d4974cf689dbb18cc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
HeapAlloc
GetProcessHeap
HeapFree
EnumCalendarInfoExA
GetDevicePowerState
SetEndOfFile
CreateFileA

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ