1c583bdcc843415db16d025453860595_JaffaCakes118 | Triage

Sharing

General

Target

1c583bdcc843415db16d025453860595_JaffaCakes118
Size

83KB
MD5

1c583bdcc843415db16d025453860595
SHA1

81fa990bf11913ad77de4e32888a67ddd926d569
SHA256

1c77fdf83d84fa761da8349c2585efb54464759ae8e3f72a21b7503327a4badf
SHA512

9b618caff6b69bee29a8983cdb6a7a3409ebb32276619c684921199747bab794ebba01d97a792f1d12118ae9848425b41a858e5909077d73c585dc735e162c78
SSDEEP

1536:glSg2jTCs2JspZe7Eyv+cZhgiJmLp4/ZIoPypjVrs2ryrd1vUQuqNTjOo:glb4CshveDvvyKmLpUlyHs2qz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c583bdcc843415db16d025453860595_JaffaCakes118

Files

1c583bdcc843415db16d025453860595_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5a0ccfecd76685040c07d348b3f8c156

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteVolumeMountPointW
AddAtomA
SetConsolePalette
PrepareTape
GetPrivateProfileStringW
GetSystemWindowsDirectoryA
GetConsoleInputExeNameA
EndUpdateResourceA
GetCommState
BackupRead
GetConsoleAliasExesW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE