fef384b89dcbf7691050d85888e28a07_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fef384b89dcbf7691050d85888e28a07_JaffaCakes118
Size

63KB
MD5

fef384b89dcbf7691050d85888e28a07
SHA1

75d0ce58ae24467e446142ec9327ee4109db0c8b
SHA256

545688cf0a99b311d83d3f993b87ec1c07daf73d829b212ced6e55be5b94f696
SHA512

637463b186bb2e7724b55f3d24a914f3b7445fac1418d69ad13bfbaba3d756fbb57f37eee6ee629ed8069fbb0e4d00e1510e9bf623d405366d4bb1b39e1cdd7d
SSDEEP

1536:deB8TMGmFIp48mL+kVhwyU9yHuObchZIW+j/VBadvvWQ3Bx1:IGFfp4rLjVhwyU9EuO/Nj/advvW4d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fef384b89dcbf7691050d85888e28a07_JaffaCakes118

Files

fef384b89dcbf7691050d85888e28a07_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b9f3dfcc3f48b4c48d1b0b8e6b70c2a2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DecodePointer
SetCalendarInfoW
HeapSize
CreateTimerQueueTimer
GetUserDefaultLangID
SetEvent
MulDiv
DebugActiveProcess
QueryInformationJobObject
CreateThread
PeekConsoleInputW
SetTapePosition

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE