383c0498e56e7d58335bc900aace7117_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

383c0498e56e7d58335bc900aace7117_JaffaCakes118
Size

30KB
MD5

383c0498e56e7d58335bc900aace7117
SHA1

04983f0c03c160cc7a3d3454056f3fceebe9ba09
SHA256

d83fad73d1af7222c52998b13a4c2c60c9043a9863c2cdfc56dbf5494a8a8b98
SHA512

76d0986deb893ea2d403080abc1dce2c09f7c751d76319aa7dc28d81a69055d538aa4c4494e9f711bf727029dcb306c9943315124d54dc57b5d9f01b771db206
SSDEEP

768:VOasaSOUboOpmq3FJDiOO4IRocsqlT2yvX1h5Juw:MIUnmqv5DNmlTz5Juw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
383c0498e56e7d58335bc900aace7117_JaffaCakes118

Files

383c0498e56e7d58335bc900aace7117_JaffaCakes118
.exe windows:4 windows x86 arch:x86

22f7fe94e50f48d3648aa87d53c4f056

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CancelWaitableTimer
WriteFileEx
GetProcessHeaps
WaitCommEvent
CreateThread
lstrcmp
WaitForSingleObject
SetConsoleScreenBufferSize
GetQueuedCompletionStatus
CreatePipe
FlushConsoleInputBuffer
ReadConsoleInputExA
IsValidLocale
GetCurrentProcessId
DnsHostnameToComputerNameA
GetThreadSelectorEntry
GetStartupInfoA
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

text
Size: 4KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: 22KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 604B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ