7758b688256c1350f287da659e529ec4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7758b688256c1350f287da659e529ec4_JaffaCakes118
Size

298KB
MD5

7758b688256c1350f287da659e529ec4
SHA1

f8d4998aa3fafafaef153e8894a96fa7a648122a
SHA256

445a61b1cea38c41e2997290a36cbff727f0ce53b1a5534a223d50eb923599d7
SHA512

7fc484737dd309ae92fc8e32294152be1ecaa93cad9a42ca3d78b613c17835a007f190fce0ffc7a93bf5e9270d9a22e5cb84fd8379da7d736edd11b1cd004fff
SSDEEP

6144:f4JTJaxOE5IK8Ade5WhrrUWnESd3aXDHCwYvbP6461ajQdrzzScQEPgTvQWlSOq:f4J8D5IK8cemr1zKEbP6l1akztUTvNl7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7758b688256c1350f287da659e529ec4_JaffaCakes118

Files

7758b688256c1350f287da659e529ec4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0ae93096b785f5d1600ee3c00d3f796b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileStringA
GetLocalTime
TlsAlloc
GetModuleHandleA
GetTickCount
ReadFile
EndUpdateResourceA
SetStdHandle
CreateWaitableTimerA
HeapCreate
lstrcmpiA
GetExitCodeProcess
GetConsoleTitleW
SetPriorityClass
GetLogicalDrives
SetLastError
GetLastError
GetStdHandle
GetDriveTypeA
GetBinaryTypeA
lstrcatW
IsValidCodePage
CreateNamedPipeA

netshell

HrLaunchConnection
DllGetClassObject
HrGetIconFromMediaType
NcFreeNetconProperties

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dataz
Size: 293KB - Virtual size: 293KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.orpcx
Size: 1024B - Virtual size: 521B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ