f1d57bc06963ba39e84a4bfb2fd47b74_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f1d57bc06963ba39e84a4bfb2fd47b74_JaffaCakes118
Size

145KB
MD5

f1d57bc06963ba39e84a4bfb2fd47b74
SHA1

98d321bffa736bd40d2a2cf417612c924f287b3d
SHA256

e06e64c827638a8bbee3f8d17f31d5db130717d56485544f816786db7a5a71ab
SHA512

9fb4c4ff0fb43fb850fd7090b003e6ed32a40521f26ff70671678dcbd4c580ac90f93fbda783eab91176452076a319fcff17ad048512564a63b3a1cd03b642dd
SSDEEP

3072:imj+r+OeZzNmVv4SwoRk+yJ3H0Fc9UCj0uA4Mna/cZSaxsj68CqpCa29Z:iniOGRm+SwIBKEF9U6LEv3pnQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f1d57bc06963ba39e84a4bfb2fd47b74_JaffaCakes118

Files

f1d57bc06963ba39e84a4bfb2fd47b74_JaffaCakes118
.exe windows:1 windows x86 arch:x86

b92dbba67fb08b6d0e02a0f8aae047d5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

RaiseException
VirtualProtect
Process32First
OpenJobObjectA
VirtualAlloc
MapUserPhysicalPagesScatter
FindNextChangeNotification
GetSystemWindowsDirectoryA
GetCommandLineA
GetComputerNameExA
GetModuleFileNameA
ReadConsoleA
VirtualFree
GetCommandLineA

winspool.drv

ConfigurePortA

Sections

.text
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 92KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ