2aacf42babf9942879c6d4d9049cea5f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2aacf42babf9942879c6d4d9049cea5f_JaffaCakes118
Size

62KB
MD5

2aacf42babf9942879c6d4d9049cea5f
SHA1

f4e997da1c8a7554f187a71ef96666a6a581e2cf
SHA256

d3612631ae421481364ea6d7103df4abfc0db9e5e6fde3dd2168ebe88fb76192
SHA512

686a16ebbfc527284bd067135794471aa6d3a1d9c0a54f661dd9a7daceb3b8fbfca62c7a96ed465aecbc07c3fa119ddc738c636261812e6a6ae1966ab58cb60d
SSDEEP

1536:ZxNiP/UuH6aVNUjRRlXeJ2iT7AjJth+akzhUTZd3Fan:ShP36Na2Mkt2zUZ4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2aacf42babf9942879c6d4d9049cea5f_JaffaCakes118

Files

2aacf42babf9942879c6d4d9049cea5f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

85ba6b43de465b938c331c5358c61696

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CallNamedPipeA
lstrcatA
SetStdHandle
ExpandEnvironmentStringsW
DeleteFileA
SetThreadContext
AttachConsole
SetCommBreak
FreeUserPhysicalPages
FoldStringW
SetConsoleIcon
AddAtomW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE