56b0b0bf18b39763fde569fc86ed14d5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

56b0b0bf18b39763fde569fc86ed14d5_JaffaCakes118
Size

83KB
MD5

56b0b0bf18b39763fde569fc86ed14d5
SHA1

3f96bc6e1bbb5e22412c4c2574aee40c44d32cff
SHA256

21a45896991c388fd03edcbc8924449e1054786dac21a7036a51a4c3044b7440
SHA512

2b8778125d368b6babb2c737a3f9a0f57202c81c597a1ada3b78319b7f9f0765bb24a4ae62ed3b1feb41e85c066639829b4669b5b7d4c6f544eb53ec93b84c33
SSDEEP

1536:oRRRRrJK2OWYIa+z9Va7lPmi1uEjiIsRguMcpNkv074FgjEErxTWDTMqhGKYIZTE:oRRRRrQ/A7Q5I5ZyMKgjBkMqhGKZTbbc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
56b0b0bf18b39763fde569fc86ed14d5_JaffaCakes118

Files

56b0b0bf18b39763fde569fc86ed14d5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e81da04a99682cec8437b498389c1d77

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVolumePathNameA
GetGeoInfoW
SetDllDirectoryA
LoadLibraryA
GetPrivateProfileStructW
DeleteFiber
FindResourceW
GetUserGeoID
GetDllDirectoryW
GlobalCompact
GetSystemDirectoryW
EnumResourceTypesW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE