09e418dc4d90139a5859f7e8f9c88b29_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

09e418dc4d90139a5859f7e8f9c88b29_JaffaCakes118
Size

62KB
MD5

09e418dc4d90139a5859f7e8f9c88b29
SHA1

f9b8aa5c15a64f35a792f79d5c15bd8019221376
SHA256

3f7d2bcc192440565a66b68cc34a31a4b699fe9b8855cd8047e388fadc189e9d
SHA512

1956c74ca29a68f05db864579243eecee5784b790ea7f5f5aa3176ed698b0366be67213672ac9fe5fc0d3cbca2fdc674cf094dc9d1a62aaace4371c582e84150
SSDEEP

1536:HwibyD2B7SE+kfbIDpCng+DkCMgJ5XADArre1W0+:9bWSSdy++gq7Mw5Xbrre1W0+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09e418dc4d90139a5859f7e8f9c88b29_JaffaCakes118

Files

09e418dc4d90139a5859f7e8f9c88b29_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3dab63f50e12182ebef62bdf559f9dc2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFileEx
ReadConsoleOutputAttribute
OpenEventW
EnumResourceLanguagesA
LoadLibraryExW
PeekConsoleInputW
IsProcessInJob
GetModuleHandleA
ReplaceFile
EnumUILanguagesA
lstrcatW
CheckNameLegalDOS8Dot3W

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE