12b07169c449f784345a491365eaa44a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12b07169c449f784345a491365eaa44a_JaffaCakes118
Size

83KB
MD5

12b07169c449f784345a491365eaa44a
SHA1

53ab46122212d3e13fa3d0f10076e46738ad5e1c
SHA256

65c3f5df60e00c6ed923800c053dfdc4459f9bfe3740d25e82b8a48e37cb6ffc
SHA512

511e73e00b102da74c5866a154688ea87fae00be4a6c44d94fd4e207739c33696f34a99cd4e3ff5e36a1c70024537e25363efd4c7fdc4ac34a3fee8a76d4fba5
SSDEEP

1536:U0000e0ON5OGNKatlTIYa0HA5DqdJTdDHvCIl20ZjEErxTWDTMqhGKYIZTET8bDQ:U0000W5fNxrEaHcDqdJTll20ZjBkMqhW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12b07169c449f784345a491365eaa44a_JaffaCakes118

Files

12b07169c449f784345a491365eaa44a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c897f8a31b469afa4ed6124b77a1214c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnlockFileEx
IsProcessInJob
EncodePointer
GetOEMCP
EnumSystemLanguageGroupsA
GetConsoleAliasesLengthW
DosDateTimeToFileTime
GetConsoleTitleA
RemoveLocalAlternateComputerNameA
SetLocaleInfoA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE