4165e1505d2c51120d55d67a96b263a6_JaffaCakes118 | Triage

Sharing

General

Target

4165e1505d2c51120d55d67a96b263a6_JaffaCakes118
Size

83KB
MD5

4165e1505d2c51120d55d67a96b263a6
SHA1

01fe4640dbc72787674cdbe44387516fc62a7262
SHA256

8d40933848177a052464dd4643119d4f23890675415b99fb6d194f2806d593d5
SHA512

26208a686c1b4cca54e3a88729a155a7fdd3d535eaad2211ad3268654904ab064ef2382de96f14726fd1e5cd38448712ae0e736275077cbc6dfc0a143c780478
SSDEEP

1536:YXvN9rhws38hhqtgyWxROOIU/xWwMPNCqn/RzlVTWqtrx3rxopjVrs2ryrd1vUQo:YXF9rh/shhKMwBR1CqnRlVTW2rx3rxo4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4165e1505d2c51120d55d67a96b263a6_JaffaCakes118

Files

4165e1505d2c51120d55d67a96b263a6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

09d4d957a22f111d7d8fc2f3adc6aba1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AllocateUserPhysicalPages
GetNumberOfConsoleFonts
SetFilePointer
GlobalAlloc
GetConsoleAliasW
GetExpandedNameW
ReadDirectoryChangesW
SetLocaleInfoA
WaitForSingleObject
CallNamedPipeW
EnumSystemCodePagesA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 27KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE