86e3667cf9ec19ea0be51e038fe40eab_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

86e3667cf9ec19ea0be51e038fe40eab_JaffaCakes118
Size

476KB
MD5

86e3667cf9ec19ea0be51e038fe40eab
SHA1

bf89ec840fb79f72461a32e6f612d3f544d790f7
SHA256

c662a9110be5d234aab8a07592b05e7a793de972c5d81dc8afd22bd4ea135cfa
SHA512

a7086cdb288ff79e0f43d15de7c86d6555e49a8abb617f0cf30ac421cbe5e696556d6a646a425b8aaabc52d5b3d5a762f31257428c5a8dfcbd1e07197ef30e86
SSDEEP

6144:840mjRcIKy+uRgcg1NmzAJoQ0i7pkobSE80sNF0mRBJe1uFzjGxQr2X80Cm:R0kvn+ooJ979bj8VNF0GBJM21t0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86e3667cf9ec19ea0be51e038fe40eab_JaffaCakes118

Files

86e3667cf9ec19ea0be51e038fe40eab_JaffaCakes118
.exe windows:4 windows x86 arch:x86

95172031398ee4f31d2e65589808d34b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

clusapi

ClusterNodeControl

kernel32

GetCommProperties
SetFileApisToANSI
ConvertDefaultLocale
SetErrorMode
WTSGetActiveConsoleSessionId
UpdateResourceA
GetModuleHandleA
VirtualProtect
VirtualQuery
FreeConsole
GetConsoleScreenBufferInfo
GetStdHandle
GetLastError
GetConsoleWindow
ScrollConsoleScreenBufferA

user32

ShowWindow
FindWindowExA

msvcrt

iswupper
localeconv
memcpy
printf
sprintf

Sections

.text
Size: 100KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 877B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 333KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

CODE
Size: 352KB - Virtual size: 351KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ