031eeda0c5fbe59fad324593c3205a79_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

031eeda0c5fbe59fad324593c3205a79_JaffaCakes118
Size

94KB
MD5

031eeda0c5fbe59fad324593c3205a79
SHA1

71ca6c5f707ab7248816808d90e561cd7da35946
SHA256

f8ac2b562a4d8d5a7184817b654c64af37fe36bdca39d29683cd24d205f8bc7d
SHA512

ea6e114b3b0c5e8a684621834c5aeeaf41cc935134d32caec2b46de6d147d8039f2b8f14dd60ec512d0406afacc7a5b6b07a35c1c96d58378edba831eeab02e7
SSDEEP

1536:YJgjdJMwWehP5XDNtkq+XI/HvKlU0gONj2+gebZWTlPc8YaEJwZK4/83ZoMOALLP:KgZJMeTBaq+XQHvKlU0g6ZgebZWlhZEB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
031eeda0c5fbe59fad324593c3205a79_JaffaCakes118

Files

031eeda0c5fbe59fad324593c3205a79_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a154e2ce9a6203c19b32129a5ee9bdaf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ContinueDebugEvent
SetThreadAffinityMask
SetConsoleLocalEUDC
DeleteFileA
CreateJobObjectW
GetVolumeInformationW
Sleep
WriteConsoleOutputAttribute
ExpungeConsoleCommandHistoryW
FreeLibrary
GetComputerNameExW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.krdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE