06498365618b3f265d3fc14a9193c293_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06498365618b3f265d3fc14a9193c293_JaffaCakes118
Size

63KB
MD5

06498365618b3f265d3fc14a9193c293
SHA1

1ce189ea59940712bbfae2be3c67a4bc9bc5a947
SHA256

cbb35797af15569a7a324e5984db88bea7db329b8960d306812f7b94222d3653
SHA512

62550e5d60ec0d7f7f404fbdc3ded22cac2afbcb8f8b6d315b7227591be0a3cbe4ae9f16a1c6443a27bb5ee882262d7ddc9697dbd0c4be54a66ba70caa5f6f8c
SSDEEP

1536:WJimdsr2uNwTc32uE5lYXw0e+WS4zYXCLeZNVxjx/:WJiPwhL5I6S4a3njV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06498365618b3f265d3fc14a9193c293_JaffaCakes118

Files

06498365618b3f265d3fc14a9193c293_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2da0070e2a98f639b3d109a99eec1c6c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AllocateUserPhysicalPages
WriteProfileStringA
GetConsoleFontSize
lstrcpy
Module32FirstW
SetConsoleTextAttribute
GetDllDirectoryA
OpenProfileUserMapping
GetNumberFormatW
GetFileSizeEx
GetConsoleCommandHistoryW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE