008c854a83ed59feaf224337f1cb0517_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

008c854a83ed59feaf224337f1cb0517_JaffaCakes118
Size

56KB
MD5

008c854a83ed59feaf224337f1cb0517
SHA1

14885850a4d6a0e163a308f042a5918fd4f2fa39
SHA256

e9fe4db7330ae9868a0f81ec642e3bde06bdbec7b38142eaaa0d6c488b8bc143
SHA512

2c822d08267a1885bdf12269dc1eccc98b4fec1af3cb0f7c891092b86d85c1cf42c103a951ca0ecf25b65b2ceb62fbfbd6d2a30406f95b9c012c2542beeae794
SSDEEP

1536:N6R3zzkC2QlqPoFCO+If2DhB9hkfC7fhmluUATu97EJ:NmznqPY+If2dB9hh7ZbUAqw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
008c854a83ed59feaf224337f1cb0517_JaffaCakes118

Files

008c854a83ed59feaf224337f1cb0517_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ed6a5ea183ade7bf077c98d01f7591f2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileW
SetNamedPipeHandleState
SetCurrentDirectoryA
lstrcpynW
IsValidLanguageGroup
GetSystemTimeAsFileTime
BuildCommDCBA
SetConsoleActiveScreenBuffer
GetProfileSectionA
GetConsoleCharType

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE