231fb79eb069ed5fdc9bf5f3f4f00f62_JaffaCakes118 | Triage

Sharing

General

Target

231fb79eb069ed5fdc9bf5f3f4f00f62_JaffaCakes118
Size

62KB
MD5

231fb79eb069ed5fdc9bf5f3f4f00f62
SHA1

b972156ef6c2c76ae1af46ba391f883b3eef8338
SHA256

7f2ebcf3d0428227e157f4844315fe601efa860c01cc4c11ca285ba30d4a5521
SHA512

e9ec135b536e89774a39b2abb4cacc096a3c920a222dacb934ad858d36a9144ceb0ff488da41282bfa07385256a8afb2447b173e182d52020abd01c84a6fd7b9
SSDEEP

1536:sL3KyLQfCML7uNdRJdIzyj+nkEx8bX0sJXEwJ8fejRq0I75vMeS:aU4dDddfEe9Xhuydt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
231fb79eb069ed5fdc9bf5f3f4f00f62_JaffaCakes118

Files

231fb79eb069ed5fdc9bf5f3f4f00f62_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8f4cf9ef08f4f3e1b149753ba756f971

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WritePrivateProfileStringW
SetConsoleOutputCP
WriteFile
GetStdHandle
UnlockFile
UpdateResourceA
QueueUserWorkItem
LZSeek
ExitThread
InitializeSListHead
lstrlenW
GetConsoleCP
CheckNameLegalDOS8Dot3A

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE