2479945052003289d26688d0c9012f26_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2479945052003289d26688d0c9012f26_JaffaCakes118
Size

63KB
MD5

2479945052003289d26688d0c9012f26
SHA1

eb845587c88b6784e4eeee622a4a2fcac99c7e73
SHA256

bc3322b00844f31d024d91417a9fe08a913a4cf8b7adcf071f1076f55c812bcf
SHA512

5b56f3135e23324d83caf06d9e20e830525380016fb89191567e464ddefbe00d12434300efdeea188c013716682351965cccaa6a9348e644f6ec69cfc375d7a1
SSDEEP

1536:LqPy6dGdBSDRoaJhtjzcfIXrT2ZUuTO5QsYJBTn05hiFu:uy6cdBSDq8jzcfKnkUw89YJBg5hIu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2479945052003289d26688d0c9012f26_JaffaCakes118

Files

2479945052003289d26688d0c9012f26_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a6fd5b024aa42111bd148fded182b091

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommConfig
SetConsoleCtrlHandler
RtlZeroMemory
GetPrivateProfileSectionNamesW
EnumSystemCodePagesW
GetAtomNameW
UnhandledExceptionFilter
GlobalFindAtomW
EnumTimeFormatsW
GetConsoleFontInfo

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE