0767dac65cfd055ebce4616574f42e20_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0767dac65cfd055ebce4616574f42e20_JaffaCakes118
Size

56KB
MD5

0767dac65cfd055ebce4616574f42e20
SHA1

6385c59f924a7956413bacda6bfe23a1228c5dbf
SHA256

570e138ae71094390fedd4a8b4d64a80a911fccb05f441d24de3e173fbe54fbb
SHA512

4e2ba81885502dabe65eae5ac3e1a1fd6607867a85eecce8ba81fec80d7f174b16815f4d7e6a3a662b2e5bfe2aa84c71342771d4fcb5a484f411704d573ea7bf
SSDEEP

1536:8mmm7jP7b6zWpFIocSodKvmaZE+Qk2RCNzUTf/MNo:9jPKqpO5dD8jUTnMNo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0767dac65cfd055ebce4616574f42e20_JaffaCakes118

Files

0767dac65cfd055ebce4616574f42e20_JaffaCakes118
.exe windows:4 windows x86 arch:x86

56e8f7706079dbde32e86a9daac56818

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetBinaryType
FindResourceExA
SetConsoleCursorMode
CreateJobObjectW
DosPathToSessionPathA
TryEnterCriticalSection
GetTapeParameters
GetConsoleKeyboardLayoutNameA
CreateFileW
FindClose
SetCommBreak

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE