367550a085fc73e14ac48db0ebf142bb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

367550a085fc73e14ac48db0ebf142bb_JaffaCakes118
Size

196KB
MD5

367550a085fc73e14ac48db0ebf142bb
SHA1

95d372d46ec09f7124b29ac499924f343f6265ac
SHA256

5e42852bbdc37e41a55113d01ca28a1f96417e6d5bad886ab36b0cab778bc6df
SHA512

e4b1f7c2b0e87108383bf143e975868b0ac44eced54c616d3914936eced42c8c8b3660ded58530c9115ff1a4afec5c526bf0ef29e94cfa986767794d28929ff7
SSDEEP

3072:KKIV1sctr/yoytKPm87w4cA+iXfJBloxlmc/J8yeO2lBw1N/q2EtRD68wb6:KDV1TtXdohA5XRBlSRSo1zEDD68wG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
367550a085fc73e14ac48db0ebf142bb_JaffaCakes118

Files

367550a085fc73e14ac48db0ebf142bb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

55592cca2661c2c95096cdb1bf8ff78e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetUserDefaultUILanguage
LocalShrink
ReadConsoleOutputW
WritePrivateProfileStructW
SetEvent
ReplaceFileA
TerminateThread
GetDateFormatW
GetFileType
SleepEx
GetProfileStringA
GetComputerNameA
CreateDirectoryW
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.code
Size: 4KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ