275e904d9e748e0e3b8dc8430f92ac64_JaffaCakes118 | Triage

Sharing

General

Target

275e904d9e748e0e3b8dc8430f92ac64_JaffaCakes118
Size

63KB
MD5

275e904d9e748e0e3b8dc8430f92ac64
SHA1

0a6b7829b3294ec82ac1a01dd4b6fc7dbde98daa
SHA256

98a0d4aa5efead0fce4bcb9ebf1fa3a49f4c14c0820f450203bd1050717d848e
SHA512

00dfe8af2b434a46fefc8bf95d418b4949f3132185abfc26e5e6134be267d35daf7a8bc30f6018c6afdf7bd4d4cce91c5eeb9b9fe2ee5c2d55b0ba1a8a130c4e
SSDEEP

1536:QwtO+TGqflUntnMz5QskvhBp3RZt8XHbx4SD9CN0skL7E8lsAm:t6q+nO5nkvh9ZaXHN4U9U05c8lsAm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
275e904d9e748e0e3b8dc8430f92ac64_JaffaCakes118

Files

275e904d9e748e0e3b8dc8430f92ac64_JaffaCakes118
.exe windows:4 windows x86 arch:x86

29c899b9daa9c8c8ef3369639346e52d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadConsoleOutputA
BuildCommDCBA
EnumSystemCodePagesW
AttachConsole
IsValidLanguageGroup
InterlockedCompareExchange
EnumDateFormatsExA
FoldStringW
VirtualQuery
GetConsoleCommandHistoryLengthA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE