15834ada280ba2215f6e0f941b2b0c64_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15834ada280ba2215f6e0f941b2b0c64_JaffaCakes118
Size

71KB
MD5

15834ada280ba2215f6e0f941b2b0c64
SHA1

decef025895404795c98f58db613d467505da378
SHA256

d86f9e8a03599d56c1f8c6a0cc6dcf2d23ad2d8aa46556da5aa7f7653070c20b
SHA512

d9aa3a0be3a35a2b04ae116581f41b6183b8c94a02e40adf88410649b1d20238987523c500064d90f1038227a165d01738fefaafa785a4c56493e07a11f87a43
SSDEEP

1536:6aaPenR1dJ8kcumeYGN1UhOJ0ymEnmz+vdS/:bFRHTcjNGxmEmzv/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15834ada280ba2215f6e0f941b2b0c64_JaffaCakes118

Files

15834ada280ba2215f6e0f941b2b0c64_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c9a043a24e808e1bbbfdb1e03e9dd32f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLocalPrimaryComputerNameW
SetVolumeMountPointA
BaseQueryModuleData
VirtualBufferExceptionHandler
GetProfileStringA
LCMapStringW
GlobalUnlock
GetConsoleCommandHistoryLengthW
FindFirstFileW
CloseConsoleHandle

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 56KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE