457c99a2a39b625339c1c4259ed03fc9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

457c99a2a39b625339c1c4259ed03fc9_JaffaCakes118
Size

62KB
MD5

457c99a2a39b625339c1c4259ed03fc9
SHA1

a1e9eff94329ff4115d876848943449d387461ea
SHA256

cb584f4fe76fc0793c61ed805d6b346ac72f0ad737b2174c0d84960064a5950b
SHA512

08fd26555a4e747d83b158ae595399b077664434db9874c95a4fbe59a41ff58808a4de4429772e6edee9e36f9169cb847c48e79c5bdedf4b70c76b2bc06c8918
SSDEEP

1536:tirgRDzx1R+YPsWQpwJ4MeqREWflwG5rDnYHOUn6lH3E5phMx:AgRTR+awOJ4lqGWflvxDnYelHU54

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
457c99a2a39b625339c1c4259ed03fc9_JaffaCakes118

Files

457c99a2a39b625339c1c4259ed03fc9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fe55b6aed6a6088306a51ccaa6db9383

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AddConsoleAliasW
GetDiskFreeSpaceW
GetWindowsDirectoryW
GlobalLock
OpenConsoleW
GetSystemWindowsDirectoryA
lstrcmpiA
FindResourceExA
DosDateTimeToFileTime
InitializeCriticalSection
GetLastError

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE