15145b25554f99d93aa19150c98158e1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15145b25554f99d93aa19150c98158e1_JaffaCakes118
Size

139KB
MD5

15145b25554f99d93aa19150c98158e1
SHA1

573cbf579b8ada52df75c3cde3e617088c7c04a9
SHA256

baa1dad53ae186e5d1831e22b9d3b4e073d534f828c2a76838ec5624546f8c8b
SHA512

02a01a343caa647a2519bd2a7fabe5fccbbac576a6b96f188d07f007cb25d0681d6bcd8c9b93bd8cf1f30d9d2008305f5fa96616dc0be71b1b66f6e3d2e8a36a
SSDEEP

1536:9GnMEaEoTN6/rpHzlY9S9CCjAt8RXq3Al7VfHclbjDb+soMWxOO51s8udSttGYOY:9iTLK08/wg7MUqqdH5ekTEFjKHPh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15145b25554f99d93aa19150c98158e1_JaffaCakes118

Files

15145b25554f99d93aa19150c98158e1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c7eb297553cd34fbed1068bbc41ae028

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadConsoleOutputCharacterW
BeginUpdateResourceA
GetFileSizeEx
EndUpdateResourceW
BaseUpdateAppcompatCache
GetSystemPowerStatus
ReleaseMutex
GetUserGeoID
GetSystemDefaultUILanguage
GetUserGeoID

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 83KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE