de140c86e2fe1afb046c0040edb0b97e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de140c86e2fe1afb046c0040edb0b97e_JaffaCakes118
Size

83KB
MD5

de140c86e2fe1afb046c0040edb0b97e
SHA1

b885cd53bf47850c3b74b7e3f4527b12609b6fa2
SHA256

21af263af53c4a3cc99ad64304cb6d4dcccf9c6e5bc51e0eb3923abc7d6320b7
SHA512

cc5379d5f2fdc1093af40214a7ef50e3a4994eacd8e655283f145840e28e76797b5ff6f59376adc337b9f77633cb296b6e543225bbc164250fc6c35c440db516
SSDEEP

1536:c5taZr8izwNuo8mJa/bbMhuxcgao6sWddmX79F2MPxHJQbGvMcVWMb2V3xEZD0MJ:c54n/rJTzNP8+IayDc4Hs2q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de140c86e2fe1afb046c0040edb0b97e_JaffaCakes118

Files

de140c86e2fe1afb046c0040edb0b97e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bce98aa6ff2b193a97029cfdeab3abad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapUnlock
LCMapStringW
GetCurrentThreadId
SetMessageWaitingIndicator
SetConsoleCursorPosition
EnumDateFormatsW
LeaveCriticalSection
GetNumberFormatW
DefineDosDeviceW
IsValidLanguageGroup
SetConsoleLocalEUDC

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE