0724753ac647ea0b57562aa5c2f36ce5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0724753ac647ea0b57562aa5c2f36ce5_JaffaCakes118
Size

66KB
MD5

0724753ac647ea0b57562aa5c2f36ce5
SHA1

a65b8a4f34fc15c43602f656c966801bca3a9b70
SHA256

ebbae754806a22bacf5daae9ffa4d8e5905f00fbdb25fde8f78a2bd90cb322b2
SHA512

983084ee6d1d7cae9adb9b40c5c563bbf873e9df73c606f5d12f9a4bb36108cc0b7aa9ed7cffa727c3d976d4d24874625970d1f3993ab7f50275c24fc138288a
SSDEEP

1536:esGBQCLRNF26c4KRwgMMjIEv+QblRd0eOfQ5vASwPKwG:7mQCLjIRY6J+Qb50BIRSKN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0724753ac647ea0b57562aa5c2f36ce5_JaffaCakes118

Files

0724753ac647ea0b57562aa5c2f36ce5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

033cb85e19093986a8464c45f93cc603

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlMoveMemory
GetConsoleInputExeNameA
ExitProcess
GetUserDefaultLangID
IsSystemResumeAutomatic
LZRead
ValidateLocale
WriteTapemark
TryEnterCriticalSection
GetCPInfoExA
GetConsoleNlsMode

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE