121a65cc3df1dadc8b4870e9e9c06f50_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

121a65cc3df1dadc8b4870e9e9c06f50_JaffaCakes118
Size

56KB
MD5

121a65cc3df1dadc8b4870e9e9c06f50
SHA1

734a55bdc85c4ecc1cb102009206976816ff0147
SHA256

19bce76c158b315b0d12c73b6634174da67115fa247166121077ed6400a04164
SHA512

ca6484bae080f224df02fd58484c8084983973745a02f7922a28e9c8e3f02a8d46d6aaa542274466cbb29bdd1fefccb385f6d1f24a07742db3477b4305e020ef
SSDEEP

1536:A+MgnPChDLsbGTmlngrIOvm4/Vb135v5a6D+6rvSy:vBnPChDLrTmnKZxJa6D+6DSy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
121a65cc3df1dadc8b4870e9e9c06f50_JaffaCakes118

Files

121a65cc3df1dadc8b4870e9e9c06f50_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1ca886e9f390cfbec37282f2c732b03b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceW
GetStringTypeW
MoveFileW
EnumUILanguagesW
CreateProcessW
SetConsoleScreenBufferSize
EnumCalendarInfoW
EraseTape
ReplaceFileA
lstrcmpi
FindFirstVolumeMountPointA
GlobalDeleteAtom

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE