259251738885bf4eac03fd65c0abd7ab_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

259251738885bf4eac03fd65c0abd7ab_JaffaCakes118
Size

115KB
MD5

259251738885bf4eac03fd65c0abd7ab
SHA1

84b3dca0228698ebff37815365682c3532bf4f19
SHA256

307db58ec46d2d88296ab6c822af7c909597b6755877552f72542c3781202a6a
SHA512

1f431eaf8b9748f85a2bfc62d57a8ee4a0817c14a7cc2fe2359874f4e24ad4d90af6a910c24fcb13d9bb5c82836fedd16db3540aae6ffe57ce1eaa4a422e4247
SSDEEP

1536:qTo/zTdnnshnilgYeHG9McmjxG0U4D38HzlLE2ow+Sp6Pj2FObUxBhxOuORJX0bT:5E5Hqex84D3KloraO8XxOZRUH+3E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
259251738885bf4eac03fd65c0abd7ab_JaffaCakes118

Files

259251738885bf4eac03fd65c0abd7ab_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d9a61115da7954f4535df0c059f162bb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindNextChangeNotification
SearchPathW
GetSystemDefaultLCID
Heap32Next
SetHandleCount
GetShortPathNameW
SetThreadContext
lstrlenA
GetSystemTimeAdjustment
RegisterConsoleVDM
RegisterWaitForInputIdle
DosPathToSessionPathW
GetConsoleCommandHistoryW
LocalFlags
HeapFree
FindVolumeClose
GetCurrentThreadId
OpenJobObjectA
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.text
Size: 5KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE