246a1421178f60b0d591ef2707d0dad7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

246a1421178f60b0d591ef2707d0dad7_JaffaCakes118
Size

20KB
MD5

246a1421178f60b0d591ef2707d0dad7
SHA1

f6be53b614803c665d8ccb4e2f31974e64ad4b22
SHA256

27d65a8d042c940c8bde405d8e1b94fd39d0c75ee54f7d752da37ea86f397463
SHA512

2d541f7985474f7b1bf25986f659dc341075f04aefc185c2ef5933a7e599d45ffaa9cd47ce3efcfad3c78bf95fe32c873abb4d14b194a335fe72cdfe2d1008a8
SSDEEP

384:sGfRke8pAVpDG4AD3EYfgo5Eoa9GpCIm4uvHjciZwSNrosUNPMiZvltR:sB9ALF1YfghCmNH5ZFNbUNPMyP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
246a1421178f60b0d591ef2707d0dad7_JaffaCakes118

Files

246a1421178f60b0d591ef2707d0dad7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

153a168f71d1be942926bd58bd781ddc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentVariableA
IsSystemResumeAutomatic
SetCriticalSectionSpinCount
FoldStringA
GetVersionExA
GetConsoleCursorMode
GenerateConsoleCtrlEvent
SetHandleInformation
EraseTape
ExpungeConsoleCommandHistoryA
QueryInformationJobObject
CancelIo
LocalUnlock
SetConsoleIcon
CreateSemaphoreA
GlobalCompact
UnhandledExceptionFilter
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

itext
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

text
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 736B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ