38741f67621a49571405b2f9923850e3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38741f67621a49571405b2f9923850e3_JaffaCakes118
Size

56KB
MD5

38741f67621a49571405b2f9923850e3
SHA1

9a21abcc60fc721dab42fc85b8287c8613bb6983
SHA256

7983bcf711d4ecab2583eda3afc50181b2c294f9c7ef59eead18a85c0fa74785
SHA512

f76c467fab7f1c90f3296553129f74ca6f0d1834be7df3b415d7568d0a1d90ed9cda7341ab23435077473dca8c75189325fbbf8477eda3f8412a157880beea0c
SSDEEP

1536:zAY3GluyAy2wnGF72lglTs3IEqqY8h9x6q:T3GlusnG2gF3pGh9Qq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38741f67621a49571405b2f9923850e3_JaffaCakes118

Files

38741f67621a49571405b2f9923850e3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2672df66ad1e0f98dbfa40e2b4c30847

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFree
CreateDirectoryW
VerLanguageNameA
GetComPlusPackageInstallStatus
_hwrite
ClearCommBreak
GetFirmwareEnvironmentVariableA
CreateProcessA
SetLocalTime
EnumDateFormatsExW
ExitVDM

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE