1c3e75a5745f80247e4cb7a94bdf6fbb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c3e75a5745f80247e4cb7a94bdf6fbb_JaffaCakes118
Size

29KB
MD5

1c3e75a5745f80247e4cb7a94bdf6fbb
SHA1

6150a95aa6a875a86594cd79ec23261693b97211
SHA256

3ca30bb56a0758b95f0631fad6f7cb6041c8dc69cb18e98b134b1bbc59cdd9b8
SHA512

3245164380d49c7836574374e9e567b2c22709666675fd52aa6d35d31c8eedbf8883a503bcb1155f57521dbbb5997d3d5f03ac7b2c9a5b6fc4832a544b77b640
SSDEEP

384:FafAAKp/Q8H5p4/NQxAJQCKoJNz+aEDLCVX40HnAjNA2n8yLaz8wiYsd7D3g:F8AAKpc/eNoJRBEM40HU+GYsd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c3e75a5745f80247e4cb7a94bdf6fbb_JaffaCakes118

Files

1c3e75a5745f80247e4cb7a94bdf6fbb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c0641db0659e555bfa6694e4f632f22d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BackupWrite
GetConsoleFontInfo
GetTapePosition
GlobalUnfix
FindNextVolumeMountPointA
GetAtomNameA
GetBinaryTypeA
EnumSystemLanguageGroupsW
CreateEventA
lstrcpynA
GetTapeStatus
GetProcessAffinityMask
GetProfileStringW
CreateTapePartition
lstrcmpi
EnumCalendarInfoExA
IsValidLanguageGroup
LoadLibraryExA
SetConsoleCursorInfo
OpenSemaphoreW
GetVolumePathNameW
RequestDeviceWakeup
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.code
Size: 4KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ