09cf5559be47b0c1b89811f7aeb5faa6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

09cf5559be47b0c1b89811f7aeb5faa6_JaffaCakes118
Size

56KB
MD5

09cf5559be47b0c1b89811f7aeb5faa6
SHA1

57547041b8d66efcb107ccb18a65f7b989593313
SHA256

c629da2f9b3e0901dee5083b5d594d0602ac32a2456b4611e6ef1e5b10c88789
SHA512

73577009c99129f4b896a61536af50d1b698434e495aa229704934c2d07610ed9841b61f2e28169b95d5681fa561fcc516cfd7002143b8479f05742a695da93d
SSDEEP

768:4MFub+TJUvlva7PCksz1cnmXiH1WS0W0rKPSqeyJOJLqPu2wR6TUqGaaXn5oiSzB:rLfPmSHQJgeyYuPJG6I55oiSzDIf6rIe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09cf5559be47b0c1b89811f7aeb5faa6_JaffaCakes118

Files

09cf5559be47b0c1b89811f7aeb5faa6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dacf5fa374db93bc20d06dee51333e4c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalCompact
AddLocalAlternateComputerNameW
WaitNamedPipeW
GetConsoleFontSize
ResetWriteWatch
_lclose
SetTapePosition
WTSGetActiveConsoleSessionId
GlobalFree
WaitForDebugEvent
DeleteFiber

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE