392418053d92820fc3f44e6272aa07f6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

392418053d92820fc3f44e6272aa07f6_JaffaCakes118
Size

119KB
MD5

392418053d92820fc3f44e6272aa07f6
SHA1

db9c6e6faf77fbd90c5794166efb23affda21b00
SHA256

2c0bbafe33e4118d1604341783a0682991cc66bc1d915ff58414092d6a1b8211
SHA512

9ae9b1ff080ac576a35bc1df58494fbc7d3d74a884c4623d6309dff9a24dee37df7a508330902e236b02eccb1f4b64fb5fe183e0dbea8afe35bcb0306a204e71
SSDEEP

1536:XXH7oT9jTlJjIx9otywknXJJKNtq84/M2gOSKvCAf8HHCiIFUSAl5kpnFYnYy2Cc:Xi9jTjjI8tZkXKrAM2gqLMrmnF+L2r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
392418053d92820fc3f44e6272aa07f6_JaffaCakes118

Files

392418053d92820fc3f44e6272aa07f6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fa26782e54593521a34f320927d6dba8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFullPathNameA
FillConsoleOutputCharacterA
WaitForMultipleObjects
GetConsoleAliasesLengthA
HeapValidate
SwitchToThread
QueryWin31IniFilesMappedToRegistry
SetConsoleOutputCP
FindNextChangeNotification

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE