dc9769b2ec995062d3e0ce6d6e93d3ea_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dc9769b2ec995062d3e0ce6d6e93d3ea_JaffaCakes118
Size

56KB
MD5

dc9769b2ec995062d3e0ce6d6e93d3ea
SHA1

8fe6e34479cebaf6d32c26a7d496b6acc8267ef0
SHA256

6b93afc7fa31637ee4c99b9a6be305308e555717770f8bee23084c07d1c3252a
SHA512

ce57c6597d94246229ece95d887b76c22d93bbaf67db40392fe4bbd1835fc22b475120130caba828ca7a026e92ef5bac16bd63161df42d0fbb09ce715d5d8779
SSDEEP

768:A0MwykT8XGk8s4lprzJaFWyiU+h7B2ho3ugSNXiQk1LOkf+Q6F1bjdLjhT5Ogwy:RVp8iTcFcU+h7BooNS0h1Lzf+HF7Fxwy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc9769b2ec995062d3e0ce6d6e93d3ea_JaffaCakes118

Files

dc9769b2ec995062d3e0ce6d6e93d3ea_JaffaCakes118
.exe windows:4 windows x86 arch:x86

eb57e527efed2838dd4d1bc652a33cee

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetThreadPriorityBoost
GetConsoleAliasesLengthW
GetFirmwareEnvironmentVariableW
GetProcessVersion
SetVolumeMountPointW
SystemTimeToTzSpecificLocalTime
GetConsoleFontInfo
GetConsoleOutputCP
OpenJobObjectW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE