4225eb260d7811d257767a1d4a2d9f68_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4225eb260d7811d257767a1d4a2d9f68_JaffaCakes118
Size

63KB
MD5

4225eb260d7811d257767a1d4a2d9f68
SHA1

02b2e4f28dcb4d7e10aab75cd5118bd9d339ba01
SHA256

5fea3344bd3efffad413856791d032d47b27a9ddcd0845b1c85256efff12c03d
SHA512

9d8d95fcbfe2f9d9b6ca5528754587dbc00d69db621dbbe773ff47ab0993932be60f49af34f871f2810e5f0f0f5446425fd62d9ebbb658b8df759a346ab482a2
SSDEEP

1536:P9+Gp/hS1t+kkwmw92o21H4yPTLjOlt6uGzSF+wjD2z:PR/hS1sZ/Vo6YybLjOL/Gzy7c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4225eb260d7811d257767a1d4a2d9f68_JaffaCakes118

Files

4225eb260d7811d257767a1d4a2d9f68_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2d7cfc910991edd5cf267bebb0ac3e09

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetAtomNameA
_hread
RequestWakeupLatency
VirtualFree
CreateRemoteThread
HeapFree
ReadConsoleA
GetModuleHandleW
CreateDirectoryA
RequestDeviceWakeup
_lcreat
CloseConsoleHandle

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE