ed6a1b0e911e6fce2592ca8531bf551f_JaffaCakes118 | Triage

Sharing

General

Target

ed6a1b0e911e6fce2592ca8531bf551f_JaffaCakes118
Size

15KB
MD5

ed6a1b0e911e6fce2592ca8531bf551f
SHA1

66053771153af4374fae1c120fec23eccd2d2e87
SHA256

5849646890d378bd2a572ebb7107b16a5080df4104b75d50cbe969a15bfa4962
SHA512

468c44ea3dcbac252a73cc1303fa227df4f42017002daa95b45b3e391e3a9c3865b6793fdd8046138ae226e93b1bde698055d99680cb867c2e56f24cbda0173b
SSDEEP

384:tP2augsU8+igx9ncAL/OVKK+x3KOifkvWnmRlUx0GFB:Z2fgsU8+l9ncAL/8KK8visvWnm8x3B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed6a1b0e911e6fce2592ca8531bf551f_JaffaCakes118

Files

ed6a1b0e911e6fce2592ca8531bf551f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6183256a9cd83b6f3411b8e2a4440841

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleAliasExesLengthW
GetVolumePathNamesForVolumeNameW
CreateTapePartition
WaitCommEvent
IsValidCodePage
GetCPInfoExA
GetVolumeInformationA
OpenMutexW
SetConsoleOutputCP
SetCurrentDirectoryW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE