225a87a3de0b33b9cde0ad7a7b2eb47b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

225a87a3de0b33b9cde0ad7a7b2eb47b_JaffaCakes118
Size

76KB
MD5

225a87a3de0b33b9cde0ad7a7b2eb47b
SHA1

691637e99925766c7ccd44aa0a88aa6626e968eb
SHA256

d0c762e31ebd371731624029f1a5ad308782d80dc306380325b35655525eb78c
SHA512

5d26129abb6e96610702b52c142d65bc0f517e0db2c0f39bb4ae3bfe695ccddefd79a402e673f3675c76cd9b8b9c29ff3c32604302bce3f1fafa20ccff1d9236
SSDEEP

1536:YJOWTz+LIclJ1Pf+KQ7hYwD4r6FfrzkjmH8pyJeir6CcHZJlR:Y/aMGJ1X+j4ivCmHiyEiWzlR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
225a87a3de0b33b9cde0ad7a7b2eb47b_JaffaCakes118

Files

225a87a3de0b33b9cde0ad7a7b2eb47b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f812ccf398c70974ed9df4b272a19893

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObjectEx
GetConsoleNlsMode
ContinueDebugEvent
Module32FirstW
GetThreadPriority
GetNumberOfConsoleFonts
lstrcpyA
ExitProcess
DnsHostnameToComputerNameW
FindResourceW
SetTimerQueueTimer

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 61KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE