21ae341fc189439b3677cbfa6cd105ef_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

21ae341fc189439b3677cbfa6cd105ef_JaffaCakes118
Size

168KB
MD5

21ae341fc189439b3677cbfa6cd105ef
SHA1

42e8f9d4074c5feae4b36c92db073aa8934e8601
SHA256

3d9356aaa51ddb619a171a0b0e5883d4fe152c8e345493df07f83b9ffd5acf82
SHA512

ad44f1c078ba0037c5bef090d0ffd01ccd36bf772ff5523b4e995d629aa7796585c27ebb66ea1435594c7101ab27b870661ba7de314444ead0ca679e0c404cf9
SSDEEP

3072:lcgUKK5f/zzB5rVbwjfMAc9tP/+mz/ze+sYfCXgS0fWiH5zOyq:md/F75qfMjlmmz7/pS0eiHUy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21ae341fc189439b3677cbfa6cd105ef_JaffaCakes118

Files

21ae341fc189439b3677cbfa6cd105ef_JaffaCakes118
.exe windows:4 windows x86 arch:x86

76a8a742f79426543573fa703f90e357

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalCompact
GetDriveTypeA
SetCalendarInfoA
DosPathToSessionPathA
LocalSize
SetConsoleMode
CreateWaitableTimerW
GenerateConsoleCtrlEvent
CreateToolhelp32Snapshot
SetConsoleCursorMode
FindResourceW
OutputDebugStringA
_llseek
Process32First
SetConsoleNumberOfCommandsA
WaitNamedPipeW
GetVersion
GetSystemTimeAsFileTime
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.text
Size: 4KB - Virtual size: 139KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 152KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ