09c2c170afe29f1f7b004463c62d3f63_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

09c2c170afe29f1f7b004463c62d3f63_JaffaCakes118
Size

56KB
MD5

09c2c170afe29f1f7b004463c62d3f63
SHA1

013686a8219b1ce752e6508e1b10a73361c5fa14
SHA256

adb1947c15b3d624333b683c4ae3a2642bd99bb3c5289ea1fe4429ea94dfc631
SHA512

09e490b7ff03e5b5106ff429caedad59b41076804eeb2a08ed76c157579696aabedc51aa802cb91e959b7d7006e146cb68857e61466e0217bc6644f126a6a34a
SSDEEP

1536:g1N/MUeb3FgR8IXlw55/M47EDdZPFSKHnDCM4o:g//Deb3FEvqwSUhGQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09c2c170afe29f1f7b004463c62d3f63_JaffaCakes118

Files

09c2c170afe29f1f7b004463c62d3f63_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3c188fec3df67acaec9e93f8706f86dc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessInternalA
EnumDateFormatsW
LoadLibraryW
OpenProfileUserMapping
SetTapeParameters
SearchPathA
lstrcmpA
GetPrivateProfileIntW
CheckNameLegalDOS8Dot3A
LZCreateFileW
WriteConsoleInputVDMW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE