340c50d1c5eb1cf183ef69067cdbc87e_JaffaCakes118 | Triage

Sharing

General

Target

340c50d1c5eb1cf183ef69067cdbc87e_JaffaCakes118
Size

63KB
MD5

340c50d1c5eb1cf183ef69067cdbc87e
SHA1

7da36a00921454b39ba28ba7e779d6dbba21201a
SHA256

a8122dcf9492aa6c31996029dbab9e2271c80df3c18a97b5d9eae3146797790c
SHA512

4cb6ad50fc84034e735d25c8775e578d429aed98a363cc4f33a2cdb31bd5b6e59371c3b567db0ea812be97c1f670d16886d4391e7d865ef3c1bd7dc498f142f6
SSDEEP

1536:jGhpNG8L6S7GPue/QhpkNguyjPSJcDcbcOzA05:MtuuG/vgdPSJkcbxzA05

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
340c50d1c5eb1cf183ef69067cdbc87e_JaffaCakes118

Files

340c50d1c5eb1cf183ef69067cdbc87e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0862d947ecd14c3acb182cc61f8bdeaa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVDMCurrentDirectories
CreateIoCompletionPort
GetNumaNodeProcessorMask
GetVersionExW
CompareStringW
GetProcessId
VDMOperationStarted
RegisterConsoleIME
LoadLibraryExA
GetConsoleCommandHistoryLengthW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE