249202d206aa861db94a9321d5d003fd_JaffaCakes118 | Triage

Sharing

General

Target

249202d206aa861db94a9321d5d003fd_JaffaCakes118
Size

104KB
MD5

249202d206aa861db94a9321d5d003fd
SHA1

7a46f50a78cfe721eae32193301d6ec8afc1d321
SHA256

f5155596c6835e58f718c45d6b8ba0bd32a1c680ff8f47c48d1e83779d43fca1
SHA512

5cbaed3fa91cbc44c6abfa5ba7a3f3f0e3bbf20fb6c243b30256f8610c7a9d5a75b8050028690b12201fd3e736e2b26f3baac53ab81b3983c341887317a5d4d4
SSDEEP

1536:uWjlhLOHJwPDoT2HGKy7m6KitbiklbXdLrs0RHarE0EQkxtEXrtZiH946bLHQ:uWh5i4qh7mPkzLbajEQkx4ZwH9tg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
249202d206aa861db94a9321d5d003fd_JaffaCakes118

Files

249202d206aa861db94a9321d5d003fd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

90497c93ebcdc44a22389390e20ab96f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetConsoleAliasesLengthA
GetConsoleCommandHistoryLengthA
GetConsoleCharType
lstrcmp
GetStdHandle
EnumSystemCodePagesA
ExpungeConsoleCommandHistoryA
DeleteTimerQueueTimer
WriteProfileStringA
SetTapeParameters
MoveFileA
CreateConsoleScreenBuffer
_lopen
FindNextVolumeA
Beep
ExpungeConsoleCommandHistoryA
ExitProcess
GetStartupInfoA

Sections

CODE
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

DATA
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pack329
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE