29f5e708acce4d78d52d2c068aafa056_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29f5e708acce4d78d52d2c068aafa056_JaffaCakes118
Size

63KB
MD5

29f5e708acce4d78d52d2c068aafa056
SHA1

bf3efbeb630abe539509ec98670deb813ef2920b
SHA256

4b765f1a9774db00a8322974131b90162a1ef81d6858be466985af296a51eaea
SHA512

0b4bd4d569fa7ba875c533dcc284c3dd19a35dd962a9acb3468aeb885e3c8500c904f6f2076d678fb8b2cb63b4c7c66cdd08293ae9d4fc6a9919b11b677be312
SSDEEP

1536:T4jFC83KcW7jxJmaPstNKKfbMMuItKqSf4UkQIIyE:UjFC83KcWoNJbMAtKJf4fQIW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29f5e708acce4d78d52d2c068aafa056_JaffaCakes118

Files

29f5e708acce4d78d52d2c068aafa056_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7baeaea4fa0c1703df8037a558dfe3ac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetupComm
_lcreat
SetConsoleInputExeNameA
WriteConsoleInputW
ChangeTimerQueueTimer
lstrcatA
GetStringTypeExA
GetWindowsDirectoryW
CreateMutexA
QueryInformationJobObject
GetMailslotInfo

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE