010910493db3b96df0736b0502a79f54_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

010910493db3b96df0736b0502a79f54_JaffaCakes118
Size

56KB
MD5

010910493db3b96df0736b0502a79f54
SHA1

03baa9149438c88b962a2c3ecf789fbf1e4849b4
SHA256

d53a18fc462957d968eb2b1bfb06251d9623a33f319e357682b6b8f71495a1ce
SHA512

3d30102c36b344dd0269c8c4687847670f3da6110d7b8004e091c78e3e868e8561e85c754bcd642e5bab060eff0ffb9b76fd978159a8582b7f2101dbbde80b9d
SSDEEP

768:cw2z50SlO91AgkmmRm/oAEs3sOuKEkkgDg92f7uiWzgpErzVk9ZklQCgVM7XKvrm:Y5pI6KEk5C2yi0ziHk6CgVMG4puA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
010910493db3b96df0736b0502a79f54_JaffaCakes118

Files

010910493db3b96df0736b0502a79f54_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b6dabcf13091d647746281835fe13c3a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Beep
WritePrivateProfileStringW
GetCalendarInfoW
SetThreadContext
SetConsoleNumberOfCommandsW
VirtualAllocEx
EnumUILanguagesA
GetSystemInfo
DebugActiveProcessStop
FindCloseChangeNotification

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE