fe7110eb698bd595c01358ed3a3d517d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe7110eb698bd595c01358ed3a3d517d_JaffaCakes118
Size

62KB
MD5

fe7110eb698bd595c01358ed3a3d517d
SHA1

3b7a9b5ff4dbba3ab8a8aacad3210cc279fd4e08
SHA256

de607de346a901d4d376d0b0037300939505d864463631b6739eeeb00d2e62f1
SHA512

b552de1d32d689acc50209703c49723de4344cab56fe13e32e957bbbb2f3c8da2732ac0922c3b5dfe3be3499491b1283e78d216999524f1a03b17c6440bdfa7f
SSDEEP

1536:6qU+gvaigoGL2WU8rTtVKtNDIvMsSXjLNI3y7Dkc:6xuigozcTGTD66XjL6C7oc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe7110eb698bd595c01358ed3a3d517d_JaffaCakes118

Files

fe7110eb698bd595c01358ed3a3d517d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ca12af801849ac192394bafb9ea9ca01

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObject
GetProfileSectionA
SetThreadPriorityBoost
InterlockedDecrement
GetModuleHandleExW
PrivMoveFileIdentityW
ScrollConsoleScreenBufferA
GetCommConfig
GetStringTypeW
ReadConsoleOutputCharacterA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE