297074fb57ce0edbeaf8bfc6cff89a55_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

297074fb57ce0edbeaf8bfc6cff89a55_JaffaCakes118
Size

12KB
MD5

297074fb57ce0edbeaf8bfc6cff89a55
SHA1

b1bdde01d91b8e89a92412e1b49a47b1a4f4a37c
SHA256

1e576ee0c49ca693021d7d0334f3c0ea35f93fd4a30e0174cc2252b6ba8f1693
SHA512

074c70f08a835ba8bf05b645187143f36d9e8cb207b944360f0bcbf744aec732e40a926a0516da74fbe2dd248e45eba49677c591fd555192b3ccfcb205d50523
SSDEEP

192:Pc6iE8klvRxnzk9xeyolzf+qOpYqJ+Rovr95eFtlk5Ulw5X9vRZnqjF7eF:Pcq3nxnA9Yyolzfrw6oj9MGK0jAeF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
297074fb57ce0edbeaf8bfc6cff89a55_JaffaCakes118

Files

297074fb57ce0edbeaf8bfc6cff89a55_JaffaCakes118
.exe windows:1 windows x86 arch:x86

871beadaf63724bf2eb41f4bc0275000

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitThread
CreateThread
CreateMailslotA
CreateWaitableTimerA
EnumDateFormatsA
FindAtomA
FindFirstFileA

msvcrt

strpbrk
setbuf
wcschr
rewind
pow
wcslen
wcstod

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 508B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE