13f0bc52a71cac0ae3afc08f02bd94c0_JaffaCakes118 | Triage

Sharing

General

Target

13f0bc52a71cac0ae3afc08f02bd94c0_JaffaCakes118
Size

76KB
MD5

13f0bc52a71cac0ae3afc08f02bd94c0
SHA1

849daf2f48e15e9bf4ad83c75b5df85c9ae1e0b2
SHA256

4827353e236be58b1bab0279102d5921b18eca9b67fafc780de3aa6e54ebe7d5
SHA512

c00571c1fef87fe34a9eaf7ca4fb2ab2802bd22d3d436d7bf41f57cbcebb261e790bcd75e4b6f9f4662e5ca75679dfd0c8fe9baa22a8566fe060f1264d05b92c
SSDEEP

1536:TLHJHn7J/tzPfz0mMqwaw1pKlfbPAgJ9tWzrj7JacGp3PDSV6mjEErxTWDTMqhG6:TdJ17dMGwelfbPAJb7JacGrIjBkMqhG6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13f0bc52a71cac0ae3afc08f02bd94c0_JaffaCakes118

Files

13f0bc52a71cac0ae3afc08f02bd94c0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

004dc1e6e067a02e3872f90afa7ad005

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BackupWrite
DeleteCriticalSection
GetConsoleAliasExesLengthW
FlushInstructionCache
GetThreadPriority
EnumCalendarInfoW
GetModuleHandleExW
EnumTimeFormatsA
LZCopy
OpenFileMappingA
GetStartupInfoA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE