2564369aa15e19735aa1cd3d6fb519d3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2564369aa15e19735aa1cd3d6fb519d3_JaffaCakes118
Size

125KB
MD5

2564369aa15e19735aa1cd3d6fb519d3
SHA1

834e818bc73ec28bf677ee8804830baed0086464
SHA256

e490a4cbbf3d6ffa4e7aa3fd0dc7cf23afae72a6992511a24f2670a379f2428d
SHA512

76095727338912497744f1aaa897087ec910d93d73c84d6c1bb1eb0d2e665c51b6ed1ab1ce48998d871b679f47fe3682e8bba792cf78bbe0453e28cd52b7bace
SSDEEP

3072:xaIgYqSpYIRb/9HOIRRHsYYUh7BW9dUrTkQ3XYc:GyRb/9HxfA9d78B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2564369aa15e19735aa1cd3d6fb519d3_JaffaCakes118

Files

2564369aa15e19735aa1cd3d6fb519d3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

98f2eb9fb7bd6556bbf29ac4920c5a0a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeEnvironmentStringsW
GetStartupInfoW
TlsGetValue
GlobalReAlloc
lstrcatA
GetAtomNameW
GetDateFormatW
CreateProcessW
GetProcAddress
EndUpdateResourceW
GetModuleHandleW

Sections

.text
Size: 33KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ