527ed502066d8edb122a78d25f9b6b54_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

527ed502066d8edb122a78d25f9b6b54_JaffaCakes118
Size

115KB
MD5

527ed502066d8edb122a78d25f9b6b54
SHA1

8c485ea3153daf69361bf1894b49da13d1c20356
SHA256

699eff0de94ceba0ba53ecb20c17144a2862dcce59e927daa7f203fd0d45f710
SHA512

b84e274481312b62aa60c64aa313cc09a680b48173c5cda3ec7fe21be1f4f31751e392ef9eff9d4669157547647722a7b3eb72d208ae4f837843aaff5ab2f67f
SSDEEP

3072:Uzaib5zICtacFdK1gh/5j2rGNZQIlYyvkV/Hol3:Uz/NICtVdygh/QrGNZQIyyCHG3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
527ed502066d8edb122a78d25f9b6b54_JaffaCakes118

Files

527ed502066d8edb122a78d25f9b6b54_JaffaCakes118
.exe windows:4 windows x86 arch:x86

25c03c1eee2ec2a1ccb61b812ee2d7d6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RegisterWowBaseHandlers
VerifyVersionInfoA
GetCalendarInfoW
ExpungeConsoleCommandHistoryA
lstrcpyn
CopyFileExA
SetConsoleNumberOfCommandsA
InvalidateConsoleDIBits
ExpungeConsoleCommandHistoryA
FileTimeToSystemTime
Process32First
_lopen
GetDriveTypeW
GetTimeFormatA
SetEvent
SetConsoleKeyShortcuts
GetVersionExA
SetLocaleInfoA
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.text
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE