5673940b6e7197702cb83105cd491ebc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5673940b6e7197702cb83105cd491ebc_JaffaCakes118
Size

61KB
MD5

5673940b6e7197702cb83105cd491ebc
SHA1

fbcdfbfb65f6486f09f1c53f886aa844d7f3a2f2
SHA256

ebe02340d1d320d720ffb7754f427ce9a2640bfad806ee24c9706ab9c1cc802c
SHA512

f1d3111b1a1958f0cb59105cccbcb6cfb70cfcfb78633b8c7b8039378629be36481297bd8f2a671a9834cb73e672f2a522c683724079f01b14a565059a6ed723
SSDEEP

1536:W6666aCoIcqoJyhRjJWXYDk5386/RKJzsz7DO8SIhANFlTTHgbtGeA:W6666pojqfhVJ9DvmKdsnDgewlTTHSG9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5673940b6e7197702cb83105cd491ebc_JaffaCakes118

Files

5673940b6e7197702cb83105cd491ebc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a9c7ca02eec66b23c1b399651058821e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FormatMessageW
GetDllDirectoryW
LZCopy
BaseCleanupAppcompatCacheSupport
GetConsoleFontSize
GetVolumeInformationW
GetConsoleDisplayMode
RequestDeviceWakeup
VerLanguageNameW
SetUnhandledExceptionFilter

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE