01994e6fb0fafbf5a02bfb4500e62ff8_JaffaCakes118 | Triage

Sharing

General

Target

01994e6fb0fafbf5a02bfb4500e62ff8_JaffaCakes118
Size

83KB
MD5

01994e6fb0fafbf5a02bfb4500e62ff8
SHA1

6a59d574505578bae2af9e7ec6b81de9c2939d72
SHA256

3843ea0df8f8d632386868235acaf3a6cd9c99338baf13e608d9eb2a4afcf4c2
SHA512

4d1a9a3a111d18a755d91a47a422de63ac4c9d99c710986ec1d61cb876f4866ea9106a79689a761a31097df96ee9b79f024fd58f0c02454e7706d14ecf6b8874
SSDEEP

1536:GPMBua/K3ngUF/XjcqONMIXRPH6qvpo2SxjEErxTWDTMqhGKYIZTET8bDQ:hB9S3rXAfxX5vplkjBkMqhGKZTbbc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01994e6fb0fafbf5a02bfb4500e62ff8_JaffaCakes118

Files

01994e6fb0fafbf5a02bfb4500e62ff8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

454ce8c89a9ddabd7eb7495b241ffc74

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCPInfoExA
GetCalendarInfoA
SetHandleCount
LoadLibraryExA
CreateToolhelp32Snapshot
GetThreadPriority
BaseQueryModuleData
GenerateConsoleCtrlEvent
GetDriveTypeW
CreateProcessW
GetStringTypeA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE