261fb9f409074b3b910c8be4401f1c57_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

261fb9f409074b3b910c8be4401f1c57_JaffaCakes118
Size

56KB
MD5

261fb9f409074b3b910c8be4401f1c57
SHA1

24ca1bda76918ff5fb07e991fb291763464e4e2a
SHA256

6cf8ea843669bf834d85c99a0ac1c602c267284525d216e8dfb2c5cb01d8cf65
SHA512

e1d3c7e3a9708dacf5d548657f91bcab7e84566ed21e5119a544df083991bc38e18f08b816b29240c9987506f7065bf52a6af48aaaf58ba8f657d591c1d4b8b9
SSDEEP

1536:ZFPxJfP0Rc2v73vU4iYUPPCKQV8j0PIRkz6:TPxaRBLM4iYUPPCKQyoP9z6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
261fb9f409074b3b910c8be4401f1c57_JaffaCakes118

Files

261fb9f409074b3b910c8be4401f1c57_JaffaCakes118
.exe windows:4 windows x86 arch:x86

63770a3735a195ca043a457a76dc2263

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMailslotA
GetConsoleDisplayMode
GetConsoleFontInfo
LZInit
WriteProcessMemory
WinExec
GetCommMask
ShowConsoleCursor
VerifyVersionInfoA
DisableThreadLibraryCalls
GetNumberFormatA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE