09c3a637fa2e89a09f62d940f930e226_JaffaCakes118 | Triage

Sharing

General

Target

09c3a637fa2e89a09f62d940f930e226_JaffaCakes118
Size

63KB
MD5

09c3a637fa2e89a09f62d940f930e226
SHA1

256740d9d7bed58a688b0306eb351508a708b535
SHA256

7589befb3511f7d98df19bf84c30ca9019b4dc8a675c38d9b056c8c3fd672f4b
SHA512

7b6035a8fab602e371b159e7e319f5073f934bc65108ad4c6193b0b6e162f880c874d8fb41357cf8ffc795bdc5660387dd882a39653aaa829899298f9be4afd4
SSDEEP

1536:4Mfrrp//AIVfSswKHo9sYPfTIKZE6cnqFp3CaNg:3fr9//zw9n3TIR6cnYRg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09c3a637fa2e89a09f62d940f930e226_JaffaCakes118

Files

09c3a637fa2e89a09f62d940f930e226_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f36b95cc4b566a87af4cbd91d325bdf3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
ReadConsoleOutputAttribute
IsProcessInJob
EnumLanguageGroupLocalesW
CreateFileMappingW
LocalShrink
UTRegister
OpenThread
SetConsoleNumberOfCommandsA
ReadConsoleInputExW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE