246f964fd4f910dd57cfdd468f5d5137_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

246f964fd4f910dd57cfdd468f5d5137_JaffaCakes118
Size

75KB
MD5

246f964fd4f910dd57cfdd468f5d5137
SHA1

80aea08b6bd0336b1603ba1d9904042621bc7f97
SHA256

31a02f1b8ac06dc348f2c22222561f7d3025d52a69cf527999f98f5e7908c121
SHA512

4cdf5e19b225de3d4c373e8dff028f5fde8be8cf43e30bc45daef2e9788f5269a9f89d53c2365d7278c5c5754188fc201d4b39ddbcaedf0cbbe7b5e9ff5471c6
SSDEEP

1536:VJUnUmSVJh3T4UPuE16eG5c1VdrkQV6v8Rq267fCjlVDmDROSq8:0nUm+nNPuw65c1Vx7Vw8RR+Dbq8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
246f964fd4f910dd57cfdd468f5d5137_JaffaCakes118

Files

246f964fd4f910dd57cfdd468f5d5137_JaffaCakes118
.exe windows:5 windows x86 arch:x86

13ec7979a69c86eb895e16b3f6ad5ba7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpiA
SetCommTimeouts
DeleteAtom
FlushViewOfFile
OpenSemaphoreA
GetConsoleAliasExesW
VirtualProtect
DeleteTimerQueue
FindFirstFileA
ExitThread
GetNamedPipeHandleStateA
CopyFileW
GetSystemDefaultLCID

msvcrt

strtol
_wsearchenv
_endthreadex
__wgetmainargs
_getsystime
ispunct

Sections

.text
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 922B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE