225d482526823ce5e32714aec059d19a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

225d482526823ce5e32714aec059d19a_JaffaCakes118
Size

56KB
MD5

225d482526823ce5e32714aec059d19a
SHA1

099478839266807ebee063636e27325afc9e352e
SHA256

d4944db984e01589afc8026402acb80c7f952e2749b0189ab3d1961be9f2ffd9
SHA512

34d73b81d703db196d4c2e1c62723ab387655cf8e96be317a5462d3cddf06c48a9b75c0c7988e24f011b9350d85dabd5c127d79056b7c13a51c26ff596bb1701
SSDEEP

1536:Sxa231nFgQsNxdpOjntCMDqh1ziVekMWPjvQ45ni/:Sx531nFCrpOjnt9DqhyeklLfw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
225d482526823ce5e32714aec059d19a_JaffaCakes118

Files

225d482526823ce5e32714aec059d19a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7c6062b79f1e17f9002373f41310af4e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleAliasA
SetComputerNameA
AllocateUserPhysicalPages
SetLastConsoleEventActive
InterlockedDecrement
GetConsoleInputExeNameW
GetTimeZoneInformation
OpenSemaphoreA
FileTimeToLocalFileTime
SetProcessWorkingSetSize

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE