0be1be04965f977bf8c816948eaad18d_JaffaCakes118 | Triage

Sharing

General

Target

0be1be04965f977bf8c816948eaad18d_JaffaCakes118
Size

56KB
MD5

0be1be04965f977bf8c816948eaad18d
SHA1

da7be6643716943e38b40c579770ccc5e553553d
SHA256

0850e8906aaef65c5ed649c9553c40d29eec4cff025d3d85847fd0ffef718b27
SHA512

917728765ea56cfc86fc5b7e30387ca88df92ac9c1ab079d80a30154448a1116e60b589264da583349e9b58fcec387ca078013d2d9a6912e6995558a4b2c594b
SSDEEP

768:GPuoPkhkK3Qrxvg/FJSe8Ib/WE9YTZpMm/MR/aG7+hdly9SvVUAW6BcVyVCo+Y86:SJPkiK34+p/WXS/PMW6CJC8qAUF3k6t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0be1be04965f977bf8c816948eaad18d_JaffaCakes118

Files

0be1be04965f977bf8c816948eaad18d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e103ff53bfced36e6d69d696564ed044

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileSectionNamesW
EscapeCommFunction
GetConsoleMode
WaitForSingleObject
Process32Next
GetComputerNameA
SetTimerQueueTimer
SetConsoleTitleA
GetVolumeInformationA
WriteConsoleInputVDMW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE