f1bb654ff1bb41ca27ef92c4deba55c3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f1bb654ff1bb41ca27ef92c4deba55c3_JaffaCakes118
Size

83KB
MD5

f1bb654ff1bb41ca27ef92c4deba55c3
SHA1

9e51ec0d8dfc4a5d7633f6ae9e9fc58d84be8e67
SHA256

05a5c494e8ee5a75957dca9dd958b94996a2446790e30fad5067977e15cdfa1b
SHA512

88eb86bd8d4bfa6299d1032517c43f9c3b9fc1697c14eec65bab57408e1f4481a414da566e95785d6bd526e1177087b9f243ac81810d6d884c0ae8b5acffc8c9
SSDEEP

1536:H6UjlADRpgl2T1yKjMscbTn2Z9bRoFOqdndEfpjVrs2ryrd1vUQuqwcizSkX:H64KlBLJcP2Z9NoTgfHs2quciu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f1bb654ff1bb41ca27ef92c4deba55c3_JaffaCakes118

Files

f1bb654ff1bb41ca27ef92c4deba55c3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b4f5e976869aa9b46328309de269c4e5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenFileMappingA
CreateTapePartition
SetConsoleTitleA
CreateTimerQueue
GetCurrentDirectoryA
WideCharToMultiByte
WaitForSingleObject
TerminateThread
GetCPInfoExW
GetConsoleMode
TryEnterCriticalSection

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE