4150aac9a0443fd31df334b861bf449e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4150aac9a0443fd31df334b861bf449e_JaffaCakes118
Size

63KB
MD5

4150aac9a0443fd31df334b861bf449e
SHA1

9fbf6fc99a792554a098cb273e4a4b156cdc9b9f
SHA256

638eaa86088090b4181231bb81a7a2c96d28616f38ee0b5d021f65caf909a03a
SHA512

1cf4db4f08ad35d45bd2141c4e55ffef39dc559aaac241a3023f93e0e42fb1e06999fd59dadc4a514d843b8a080829ef26d9426a91dcb87f51343d80dc96cb32
SSDEEP

1536:jgczjgvfNuj8E9QbWmZxiulsO6fn4Yb+R09GcUR:j8VuAbPZxTshmR7cA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4150aac9a0443fd31df334b861bf449e_JaffaCakes118

Files

4150aac9a0443fd31df334b861bf449e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f5e64cae0c2537e0bd5e277393e1b296

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringW
HeapReAlloc
InitializeCriticalSection
GetConsoleAliasExesLengthW
GetBinaryTypeW
FindActCtxSectionStringW
GetDateFormatW
GetProcessHandleCount
GetDefaultCommConfigW
WritePrivateProfileSectionW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE