23c49163fe6e6b6c5e6de4345a59b646_JaffaCakes118 | Triage

Sharing

General

Target

23c49163fe6e6b6c5e6de4345a59b646_JaffaCakes118
Size

76KB
MD5

23c49163fe6e6b6c5e6de4345a59b646
SHA1

cbcf710b436823fae09e850391b7b1b5d454f01b
SHA256

a5b9848c46b2bffe144f5c7abefd2dd3aee9612456f98b56f9c89758f3ff1a11
SHA512

dae1926fe77a8512280903d7e4c9b4eb4a740528823a21b5fd07451835a6caeb865edc5e79198c8c9e6631568e872310e1d6c30b83eac79ea18a647e751cd24e
SSDEEP

1536:fvhC82mc1MCurq1+MHr8JcjHJzx1aMqFza/bjEErxTWDTMqhGKYIZTET8x:fvhC5eQoqpV1aMZDjBkMqhGKZTbx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23c49163fe6e6b6c5e6de4345a59b646_JaffaCakes118

Files

23c49163fe6e6b6c5e6de4345a59b646_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d150058f427e3d52174ff520f76e2051

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsolePalette
GetPrivateProfileStructW
LoadLibraryExA
GetVolumeNameForVolumeMountPointA
HeapSummary
GetStringTypeA
EnumSystemCodePagesW
SetThreadIdealProcessor
ReadConsoleOutputW
LocalUnlock

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE