18ca80e1aea9d3c8c78c63fcfebf14b6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18ca80e1aea9d3c8c78c63fcfebf14b6_JaffaCakes118
Size

86KB
MD5

18ca80e1aea9d3c8c78c63fcfebf14b6
SHA1

67a8150f15ec3c7e25d08ca95fea00f6c4c0fc12
SHA256

4e28e4c16d87230546c61d0b0506b59488a5f324f7ca22e2cf352b740f07ef8e
SHA512

58000e219804dac15978167f637cf80550fe4e99f9609d91df6cda4decb99e6a4a396721b51a926b2c2c6a4f0b251d55e136af60a2d5f9972a71ecd652b8fa16
SSDEEP

1536:Zaj1/60t6WKwvtvqqEXtatyVnMR7fXGQ/zQ4amgG72fTYU0t0l5snR+7WGDFBj3V:sVKYtSkQVny7fX5rQigdx0t+Ss7WGDrh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18ca80e1aea9d3c8c78c63fcfebf14b6_JaffaCakes118

Files

18ca80e1aea9d3c8c78c63fcfebf14b6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bc83e4f840c11bc79dc544cf82ff6de2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetSystemPowerState
NlsGetCacheUpdateCount
DeleteFileW
EnumCalendarInfoW
WriteFile
ConsoleMenuControl
_lopen
OpenMutexA
GetConsoleTitleA
TransactNamedPipe
CreateProcessW
MapViewOfFileEx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ice
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE