124fbe80130174aab8a5cb039828f87a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

124fbe80130174aab8a5cb039828f87a_JaffaCakes118
Size

61KB
MD5

124fbe80130174aab8a5cb039828f87a
SHA1

b2add1f882ebfd52638cddf59911a902c8334997
SHA256

d83b43005f6ead01967cb506cad8593d83867ba07ee5f25c20c573d3c912c6f2
SHA512

63abb0a944beba1276fbb762cd94a90bebf6d4c1a409062e805fa67a7046659379f133bfa76973620277084bb3d2908b7e39d4beca3a397d03f6c5cfada6f7da
SSDEEP

1536:YHRx/FmvIknbJVkaJpEi6C/J0IjoGTHUpeWJB8gZ9HK:URzmPbJVXJ/6JuoGTHUT8gPq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
124fbe80130174aab8a5cb039828f87a_JaffaCakes118

Files

124fbe80130174aab8a5cb039828f87a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

815488abe485eaf981bce610e4e5c60b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpW
BuildCommDCBAndTimeoutsA
ReadFileScatter
SetConsoleCtrlHandler
GetPrivateProfileSectionA
QueryPerformanceFrequency
GetConsoleAliasesLengthA
GetConsoleAliasA
EnumCalendarInfoExA
OpenThread

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE