240ed78094822111524449e9455360d6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

240ed78094822111524449e9455360d6_JaffaCakes118
Size

24KB
MD5

240ed78094822111524449e9455360d6
SHA1

f57ce788d213b69d403553abc35c5a4191bc0e70
SHA256

f3d8ef38f05d92522932b0b14f513f2b9b8635f604378b9ecb64f5b94ff1ba8c
SHA512

e95cf891d68632cdf326848165841014960879769685d672e8b26618c8b57be1cf376dc33376b645d2ea8f5f5aba4387e1e1b192bc01a4c1affdc610a3033914
SSDEEP

768:IuHuvI7RbfanW64OYMKNH7e0vh5RewV90qHmIviMYsnRT5:JTRUc5vpYsnRT5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
240ed78094822111524449e9455360d6_JaffaCakes118

Files

240ed78094822111524449e9455360d6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4b06cc120ca423dfbc7c8a4458ac19f5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLogicalDrives
GetStartupInfoA
EnumLanguageGroupLocalesA
GetHandleContext
ProcessIdToSessionId
CreateFiberEx
GetSystemWow64DirectoryA
GetConsoleAliasA
ReadConsoleOutputW
GetFileSize
GetExpandedNameA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE