046891f5a86466820cc2178c01a87a94_JaffaCakes118 | Triage

Sharing

General

Target

046891f5a86466820cc2178c01a87a94_JaffaCakes118
Size

83KB
MD5

046891f5a86466820cc2178c01a87a94
SHA1

9484a508fd6b65fb5e628560805c953795c222e6
SHA256

caaafe4a6411ef211a351d0bd43fef9fde9f564d42faff410c6744d5068b655e
SHA512

91f9c1f25653e0180c2d1f1f4638291c9b3b672cedd701d41a475b72ac84cf9f8aa52ecca8f5519f892edab63e6e559f945fb25e4f2193974f5548392c395064
SSDEEP

1536:ezcXp/c3CNeGmHVmTSfV3Dn321nFW/A5y3/ncJjEErxTWDTMqhGKYIZTET8bDQ:ocRc3MImTKV3D321FYOy3fcJjBkMqhGZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
046891f5a86466820cc2178c01a87a94_JaffaCakes118

Files

046891f5a86466820cc2178c01a87a94_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bc9766b72f33f1f6acd315c4c7759833

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalWire
CreateFileA
EnumDateFormatsExW
GetGeoInfoW
EnterCriticalSection
BeginUpdateResourceW
lstrcatA
WritePrivateProfileSectionW
GlobalGetAtomNameW
ScrollConsoleScreenBufferW
SetClientTimeZoneInformation

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE