563692cb3e8812ed3d322846e293a2a3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

563692cb3e8812ed3d322846e293a2a3_JaffaCakes118
Size

63KB
MD5

563692cb3e8812ed3d322846e293a2a3
SHA1

220356f0722e3416642126d098e5eedd4422edae
SHA256

d39f4e7ff2a16cac4ec815c52166714371aee0f79e24022090d6fac9825d670c
SHA512

64ac27273a88139e9f41346328147a8f7ccb12cc5dad80917434e662ef29dc1667ea33a4c3c0a25d60f8560b8adb6dce7056c05484eca2dd0e68afa410e2f858
SSDEEP

1536:4uhK+/qgHs5a66vOTUJqVXgXisAT9I7KpJMbbv7H3P6:4D+CQ6A4QysAFJMbj7S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
563692cb3e8812ed3d322846e293a2a3_JaffaCakes118

Files

563692cb3e8812ed3d322846e293a2a3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

641d681bdfe7b5bde1a8fbc7c50874a2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumSystemLocalesA
EnumDateFormatsA
SetVolumeMountPointA
LZStart
SetComputerNameExA
LocalFileTimeToFileTime
BackupSeek
SetConsoleCP
EnumDateFormatsExA
HeapSize
ResetWriteWatch
EnumCalendarInfoW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE