453d1931c8b1e2bbf1382b35a50efc00_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

453d1931c8b1e2bbf1382b35a50efc00_JaffaCakes118
Size

83KB
MD5

453d1931c8b1e2bbf1382b35a50efc00
SHA1

63e21256415bb06fe6709b1fef1257f8a62ae018
SHA256

e8cf974f1a9f0fed11a431a543c574b3bc391bb86fbd3c532406566cce41b559
SHA512

8ba0ce2850adb41caf7e47166c96913478d62135de5ae6bab5156085f1bc4b9e4732ae062a8f553c46ff26acbbbdc14e05aa6e3ae3d24de04456e4b2638b61f1
SSDEEP

1536:DvJY3ppMVdUppsUmdKTtBlKa2CT8i0ZZoYKpjVrs2ryrd1vUQuqHiw:TK3pQUpydK1KiHs2qJi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
453d1931c8b1e2bbf1382b35a50efc00_JaffaCakes118

Files

453d1931c8b1e2bbf1382b35a50efc00_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bfb5ab6683dbeecb2dff0b8019699933

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDevicePowerState
EnumResourceNamesA
GetSystemTimeAsFileTime
CancelDeviceWakeupRequest
FindNextVolumeA
GetComputerNameExA
SetFileApisToOEM
QueryInformationJobObject
lstrcmpW
BackupWrite
SetThreadContext

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 27KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE