e06a2ccd169306832fb8671a1da455f4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e06a2ccd169306832fb8671a1da455f4_JaffaCakes118
Size

66KB
MD5

e06a2ccd169306832fb8671a1da455f4
SHA1

a483b7d04848976ce920096341488319b8247989
SHA256

2e57b6562de3db51671274ec6dd67bc1ca23d11a3ef62138f7eeb5fb6d05e986
SHA512

2fda349b8c03f7d230a8be9a6016905359473c36c04a410cdef330028b80014a68960001e1b7ee5ed457519a0eb3f2b16ab6e705f953d537cb312932ed25c710
SSDEEP

1536:94cOglgaBUITL8Q6N5q/X85sbU5OLRXAfcHyOD2f:94cOLaBiQ6280PRXAfcSODu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e06a2ccd169306832fb8671a1da455f4_JaffaCakes118

Files

e06a2ccd169306832fb8671a1da455f4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

af8a69cd94996c5964cfb9d9763257f5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetCommBreak
ResetWriteWatch
GetSystemPowerStatus
GetVersion
EndUpdateResourceW
_lwrite
PrivMoveFileIdentityW
GetStartupInfoA
ConvertDefaultLocale
GetShortPathNameA
SystemTimeToTzSpecificLocalTime

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE