1873bf742e59e3dc763329d10df856ee_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1873bf742e59e3dc763329d10df856ee_JaffaCakes118
Size

68KB
MD5

1873bf742e59e3dc763329d10df856ee
SHA1

21072c2cfa4e852f6e76b92426e4d5b99a6a6db6
SHA256

f3c1e91ff548fcd5e86d1ce629e0fe31853a11d2eed754e6a0c09f8cdfe6e221
SHA512

19573ddb7eb4e714dddbff67828b7e8b52a00de3961e45fb3a10b2e68c39fbc1bd06250ee5279a666b653e313f4282d58491c6b274183cc8032beff3873bbb99
SSDEEP

1536:Cd13Jq5VHIR9Qgyz/N9OC+r7G8wIavdXki8PPwj4sGucV1F:o3a2h0zOC3gG6iRcv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1873bf742e59e3dc763329d10df856ee_JaffaCakes118

Files

1873bf742e59e3dc763329d10df856ee_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c4910fc0b8244c9b5bc0fb6ba66dec2e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalMemoryStatusEx
GetTempFileNameA
GetConsoleInputExeNameW
GetDiskFreeSpaceExA
DeleteTimerQueueTimer
UnlockFile
HeapFree
CreateMailslotA
SetConsolePalette
GetStringTypeA
GetEnvironmentStringsW
WriteProcessMemory
OpenMutexA
GetConsoleAliasesLengthA
CmdBatNotification
DeleteFiber
lstrlenA
GetCommandLineA
ExitProcess
GetStartupInfoA

Exports

Exports

AddUuvyjgfpns

Sections

.text
Size: 5KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 59KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE