e20f28c5b7708f37deca7dd28dbe2a57_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e20f28c5b7708f37deca7dd28dbe2a57_JaffaCakes118
Size

56KB
MD5

e20f28c5b7708f37deca7dd28dbe2a57
SHA1

da9240345dc741fd1a919426b07631a63417fe2e
SHA256

061103273da2310638045cf608a0cdbd417d1f1b6a36cf893837a52e5ecd7a14
SHA512

304915fdc4be6d50eba9ad6f07f9f768328c0469629a91f50c6be03f4db0362f4083187a59428d64da4c547c5c637838509defd14ef51b79d646ca8403148f66
SSDEEP

1536:Wq78P+mSwQMlNw3b7YKnW+k3YtwuffAIY0z0j4Lc:37fwQGN8LZtLfAIij4Lc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e20f28c5b7708f37deca7dd28dbe2a57_JaffaCakes118

Files

e20f28c5b7708f37deca7dd28dbe2a57_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4b04b82c8d48fd94a7e7f0552f219721

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Module32Next
GetCommMask
CreateTimerQueue
ShowConsoleCursor
AreFileApisANSI
_hwrite
GetNumberOfConsoleInputEvents
_lwrite
SetProcessShutdownParameters
GetGeoInfoW
lstrcmpi
InitializeCriticalSection

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE