JaffaCakes118_630ae8ca05ce892e1506e7dedc918745 | Triage

Sharing

General

Target

JaffaCakes118_630ae8ca05ce892e1506e7dedc918745
Size

158KB
MD5

630ae8ca05ce892e1506e7dedc918745
SHA1

ee71a61541175b2f30d9305891a3eb612d79caa1
SHA256

2400f7f98f83468d53409430a71705144897ca831a4c570ed9646ef3d730a5b9
SHA512

3da5c950b401d9b1c5066a5ee7be09a7322f36e7a18c05f90a97a9d8c07a53db32cae9ff3e2ba3aba3a10642d30980b5e026fbb7a519e1b1adcd9ec9625be6fa
SSDEEP

3072:VqePYNNGV8GnDq0e0b0XXH+qx6RlLjWbo2qVPtvTxzODFbZltJJLxU9AW:VFYNA8GnDq0Bb7qxUlLakPtvTtmtl29

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_630ae8ca05ce892e1506e7dedc918745

Files

JaffaCakes118_630ae8ca05ce892e1506e7dedc918745
.exe windows:4 windows x86 arch:x86

c19ffc2b876b70435613fa2faead3f43

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

ValidateRect
InvalidateRgn
ValidateRgn
SetCapture
ExcludeUpdateRgn
ReleaseCapture
GetCapture
GetWindowInfo
GetUpdateRgn

kernel32

GetLocalTime
GetVDMCurrentDirectories
FindResourceW
SetCurrentDirectoryW
FreeLibrary
FindClose
SetEnvironmentVariableW
SetThreadPriorityBoost
SystemTimeToFileTime
CompareStringA
GetStringTypeW
FileTimeToLocalFileTime
GetShortPathNameW
EnumResourceNamesW
FindNextFileW
LoadResource
RegisterWaitForSingleObject
SetErrorMode
FindFirstFileW
FileTimeToSystemTime
HeapCreate
LocalFileTimeToFileTime
SearchPathW

Sections

.text
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imul
Size: 1024B - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ