226fc868e63f317be04fa57a449904e1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

226fc868e63f317be04fa57a449904e1_JaffaCakes118
Size

56KB
MD5

226fc868e63f317be04fa57a449904e1
SHA1

58dd3e5898f317fd67d29fb7e49c6741935a3e14
SHA256

ba958358a1c7bfcaebd7c6fdf05fc99a54eccddfcc48074171a3faa09b9e921a
SHA512

e44b76f74a4b12c33a2fb333a9184c6ca86419efd6ded9a877a9fed47693646d8a37f7da591aef5c4ac0cd034f634825b341acfea9fba057a7a86def81d1d65e
SSDEEP

1536:3t8i7VVBOSdvy5TuWravLzLFEAiD8F///Q:3t1EbavXLViD8F//Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
226fc868e63f317be04fa57a449904e1_JaffaCakes118

Files

226fc868e63f317be04fa57a449904e1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1bcf8872df1d8d5f5e159712cd9354c5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
AllocConsole
PeekConsoleInputW
GetConsoleTitleW
DosPathToSessionPathW
AreFileApisANSI
GetConsoleCP
lstrcmp
GetCurrentProcess
PrivCopyFileExW
GetConsoleCommandHistoryLengthA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE