178698f847ec359814c81cebc82771f0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

178698f847ec359814c81cebc82771f0_JaffaCakes118
Size

40KB
MD5

178698f847ec359814c81cebc82771f0
SHA1

1487a1ad9357ff9a33e10756a292a8dedf209719
SHA256

e9a2ed8d8cc202c9a0d9a04b2190d36139350926bc651071e824a442017c566b
SHA512

3615df638aead579f8807f186878e2a89752a4dea0383240940dfe5446a6bce09f346e0212454351417dc79d78f16811ab6673edfa28e2a20896bb19f78d710c
SSDEEP

768:FKAps2GquBaMHFhdW1g5Ki95ZA3q8PoRLfAe:kVhquVlh8qb91RzA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
178698f847ec359814c81cebc82771f0_JaffaCakes118

Files

178698f847ec359814c81cebc82771f0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d89b0c3cb911a7fc2f4bcd7c8db34fa3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DnsHostnameToComputerNameW
FindFirstFileA
GetCurrentProcess
MoveFileA
ReadFileEx
HeapCreate
GetLastError
VirtualProtectEx
GetConsoleMode
GetProcAddress
SetLocaleInfoW
FatalExit
GlobalFlags
LoadLibraryA

user32

SetCapture

Sections

.text
Size: 4KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE