048c75a74a607a4fb5d5d233d0a1d071_JaffaCakes118 | Triage

Sharing

General

Target

048c75a74a607a4fb5d5d233d0a1d071_JaffaCakes118
Size

83KB
MD5

048c75a74a607a4fb5d5d233d0a1d071
SHA1

64e36a44a5ba964fef65804e6c110fba74d0befe
SHA256

a10e94ba9ad978d59f5d470c7932e4909e2b191f46402157f90125034be6e846
SHA512

58e4a37f3a7a5db07df8037bac8cc9d44f0ee9708ad19c0f1153724b2cb8faa876cc76081bae58e675fd9eb956e029b11ab9f2f73f4bc771de26fc6693b28f42
SSDEEP

1536:8sPbPAxGSwjC6WM6NTZTIm/6XBpOfskBCbc2ijEErxTWDTMqhGKYIZTET8bDQ:8sP88VWM6NTZTr/w7OfsyCbijBkMqhGZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
048c75a74a607a4fb5d5d233d0a1d071_JaffaCakes118

Files

048c75a74a607a4fb5d5d233d0a1d071_JaffaCakes118
.exe windows:4 windows x86 arch:x86

83000c9c935a8dba1cc5018b4343872f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsValidLocale
SetConsoleInputExeNameA
OpenFile
CreateMutexW
FindNextVolumeW
SetLocaleInfoW
FatalExit
lstrcpynW
GetOverlappedResult
FillConsoleOutputCharacterW
GetTempFileNameW
GetCPInfo

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE