0b070ff17472b33ddeddc95cc62d34d4_JaffaCakes118 | Triage

Sharing

General

Target

0b070ff17472b33ddeddc95cc62d34d4_JaffaCakes118
Size

56KB
MD5

0b070ff17472b33ddeddc95cc62d34d4
SHA1

628318723fb7218d955540e2bcf25658a369506a
SHA256

d735a681d646593636dc80384a982a7f2bc0e029a7f82652da8a79c441a6f9bb
SHA512

a4c6002f8ddcec8a3bb7a666fb33c8e230d89026b6a37f92087d81283775b6d4a4d71167872b5e88a3f65373488028a61676361e294bd60b74b73c096cfff34a
SSDEEP

1536:iWYRSgjtML89sMtb2IyUrkSLPifyHyLol4ZwhZO8qZ:nYo+tML89s62IyUV+yWocw1O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b070ff17472b33ddeddc95cc62d34d4_JaffaCakes118

Files

0b070ff17472b33ddeddc95cc62d34d4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f8f8e43be558aca13b0dacd78ee70151

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DnsHostnameToComputerNameW
GlobalAddAtomW
SetLocalPrimaryComputerNameW
GetThreadPriorityBoost
CreateJobObjectA
SystemTimeToTzSpecificLocalTime
ReadConsoleW
ReadConsoleInputExA
GetFileSize
HeapCreateTagsW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE