dc00c42e8e5c8c523900fbe5e293b108_JaffaCakes118 | Triage

Sharing

General

Target

dc00c42e8e5c8c523900fbe5e293b108_JaffaCakes118
Size

59KB
MD5

dc00c42e8e5c8c523900fbe5e293b108
SHA1

a8c0fa2c7b7fefe8f797bc26773f9e6b174a3e0d
SHA256

7d52116b38dce0ee589f7c6b08377b3698f1cfe219e5130df35f24faeca25546
SHA512

0ccd774c18ea1d6cbbb2f771cb7903059443cacf95bc1f9ad5e4c16f64086eaa4e03520c585ca7ffaeed443ca3640d3338287cddeb055204e266dcb25d42dda1
SSDEEP

1536:JwZZZWeDIjxIE7knsmOzUDm3myvSzkheCU2HKKpqE+5fZfozSRmUqzZjJJBK:hb0tGmyqaeCXqgqE+5fZGFjJJBK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc00c42e8e5c8c523900fbe5e293b108_JaffaCakes118

Files

dc00c42e8e5c8c523900fbe5e293b108_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b2f2e06a5b5f560ae275d19b6b33a095

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

PurgeComm
CreateFileMappingW
SetLastConsoleEventActive
GetSystemTimeAdjustment
GetStringTypeW
ReadConsoleOutputCharacterW
SetClientTimeZoneInformation
OpenDataFile
FileTimeToLocalFileTime
CreateFileMappingA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE