1001e81e77939e9104485a9a468ae53b_JaffaCakes118 | Triage

Sharing

General

Target

1001e81e77939e9104485a9a468ae53b_JaffaCakes118
Size

56KB
MD5

1001e81e77939e9104485a9a468ae53b
SHA1

741dc20676ecae9ac9e3e7a5616070ced819b8c9
SHA256

9bb51a485554d40c03a4537aa2626d91c1510e11976323289211b4ef739e6f7a
SHA512

d27686d967065e542c6d4737ef9cbe5c9242efa6e26ad9449e5f9c4c0ab93fd51964d17be0ed6397ae4f87b54cbf0751da87e8b047ec66c0bd8acbeee7972286
SSDEEP

1536:cIhhhqjFVEvFDHvEgjxJcJVaAnrgYpq2bfoqiMStUf:cIhhhqjFV4nxqVaArgYp1UZY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1001e81e77939e9104485a9a468ae53b_JaffaCakes118

Files

1001e81e77939e9104485a9a468ae53b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d3c746d566a93c7f0300c253be7b1d21

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumResourceNamesW
GetPrivateProfileStringW
GlobalAlloc
IsValidUILanguage
GetConsoleAliasExesW
BaseCleanupAppcompatCache
FlushConsoleInputBuffer
GetConsoleCommandHistoryLengthA
VerifyVersionInfoW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE