0d6d559ee66023b0159afa5f0016cc37_JaffaCakes118 | Triage

Sharing

General

Target

0d6d559ee66023b0159afa5f0016cc37_JaffaCakes118
Size

80KB
MD5

0d6d559ee66023b0159afa5f0016cc37
SHA1

65272de4f3e65c29cddec508296139cd98d72f8e
SHA256

99f14068cf417c8eca1972ddd5300003ef1c4acc8e5aead7f7caf8c46ea7154e
SHA512

c90b111650a7f2e9d577ec2c7e23286abac78abca0b92588662a08e295572877f9471f1fc6f75a81b4e847148d99ea5408dbe6d7cc680b2a4303221ceb5bca6d
SSDEEP

1536:9LtXlzJrScgrsf+pa5J6mahUtLc82hW8fPL:RJrS8fvH6mD+8vYL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d6d559ee66023b0159afa5f0016cc37_JaffaCakes118

Files

0d6d559ee66023b0159afa5f0016cc37_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2499cb36b100847659818a73f48892e2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteTapemark
CreateMailslotA
GetConsoleFontSize
UnhandledExceptionFilter
CreateDirectoryW
WriteProfileStringA
GetConsoleAliasesW
GetVolumeInformationA
FreeConsole
_lclose
GetProcessTimes

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rrdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE