523545a93d4b8098348bb7758eb08527_JaffaCakes118 | Triage

Sharing

General

Target

523545a93d4b8098348bb7758eb08527_JaffaCakes118
Size

56KB
MD5

523545a93d4b8098348bb7758eb08527
SHA1

90606a913499b68842998e633a62cee4f5e4970d
SHA256

409bf183d7cd9477f1ea6ff179cb4883175caa5a3d45bf5b71075c0cea5769d6
SHA512

73ccb2fe6c5fe6efbc8705b6a1786f6144422e9bf1b1ae3ab7917468b8fdb0bb1f73b45be0712202037f1b7d6f4e78f7867c301261cc87766406fb5248a55f20
SSDEEP

1536:Zvvvvvvb7HLW2PimFNnyTO8UMYckaW0Fc9k3IJc69:hHygHFRh8UMYcl+9k3In9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
523545a93d4b8098348bb7758eb08527_JaffaCakes118

Files

523545a93d4b8098348bb7758eb08527_JaffaCakes118
.exe windows:4 windows x86 arch:x86

17cc857ff762ee104ebb9218bee9754b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
CreateSocketHandle
LocalFree
SwitchToThread
SetThreadPriority
SetConsoleCP
LZOpenFileW
UnlockFileEx
TzSpecificLocalTimeToSystemTime
SetCommBreak
FindNextVolumeMountPointA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE