13c7ea2d8335f4d92d8d74f0b731e870_JaffaCakes118 | Triage

Sharing

General

Target

13c7ea2d8335f4d92d8d74f0b731e870_JaffaCakes118
Size

62KB
MD5

13c7ea2d8335f4d92d8d74f0b731e870
SHA1

09c79315ab2d34cd92b1561d8e6f052a1edfffb4
SHA256

1d3ad92d24d0b69dcd312df0bf8c752cd1bbdad31eab5d1fa61b0f17092d1864
SHA512

56c5bbdd124c81967b074e3c27b801133ad76f20f2b0bdceae565b68796dca8e12d7483aeb7007a68ab269f91fb586dbae655a0eafad0f62ceb739dba91cf9ca
SSDEEP

768:8/CYw8EKEE+jp0GqkFQSDVEdqWCpgZRYrXMDoopMgK2NOpGBdbNJ5Tj2fKoti5Fh:8/ZEhKHmXRVNhp49TUti/T1XBXvN/X2Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13c7ea2d8335f4d92d8d74f0b731e870_JaffaCakes118

Files

13c7ea2d8335f4d92d8d74f0b731e870_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b0859e3ed0f07f868a1c2ae83122c3f0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

NlsConvertIntegerToString
EnumSystemLocalesA
ResetEvent
SetConsoleActiveScreenBuffer
FindFirstVolumeMountPointW
IsBadStringPtrA
CreateMemoryResourceNotification
UnlockFileEx
FindResourceW
FindNextFileW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE