19e86e8b7052cc0dfc3b8849fb30c431_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

19e86e8b7052cc0dfc3b8849fb30c431_JaffaCakes118
Size

56KB
MD5

19e86e8b7052cc0dfc3b8849fb30c431
SHA1

5857eb075a61862e5e46d483bac4a52c1c88eac2
SHA256

af0241c5fec6993c705508fd81141ee911c3b7b633a26e5bb2eb13076d53e785
SHA512

6a0b679ee9dd03b6f887cb9f0de33e4d57a69a2de5a2ca24e4bcc4882b2e943bfe987760208c89e64c99f35ecfb171556d56976d61d213f2e0449beb4ff81f43
SSDEEP

1536:VuqZfv+DUrerLTOVAVKQ2iLJOKzqwKxDLqw:VuweT5z8KQLx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19e86e8b7052cc0dfc3b8849fb30c431_JaffaCakes118

Files

19e86e8b7052cc0dfc3b8849fb30c431_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c4b7f14c2abb30c026f6052497b52db1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CallNamedPipeA
ReadConsoleInputExW
InterlockedFlushSList
FindFirstFileExA
GetDefaultCommConfigW
SetLocalTime
FindResourceExW
HeapSetInformation
CreateFileW
GetSystemDefaultLangID
ReleaseActCtx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE