42e3dd6942ee989249ab2b99608f2a7c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42e3dd6942ee989249ab2b99608f2a7c_JaffaCakes118
Size

20KB
MD5

42e3dd6942ee989249ab2b99608f2a7c
SHA1

60d7bf86190076b9532fbe311025a63e16ee93bd
SHA256

af43822c3c93b0be612a08f4ba10b029801546c816383f74da5a01a83560666a
SHA512

ce5183da47c300caaf16eb11a95939992081dbbb4c28538f8baf702efd748329d33ad8cc0d74d0ca62b801112fdc85858f39c61a15a97dca7fcca9e85a403eba
SSDEEP

384:qLlbVR4e9b5yald4cKMpl1zPl7Osl7881AG6ffnw1MY6r4XA+TjuJ3eH7O9lBQK:qLlbPJ9bAaldtKulFPBPI81ALf/w1MYk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42e3dd6942ee989249ab2b99608f2a7c_JaffaCakes118

Files

42e3dd6942ee989249ab2b99608f2a7c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

736c5a6a34fa2e403cf1ff24a942c31f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadConsoleInputExA
ExpungeConsoleCommandHistoryA
GetTapeParameters
CmdBatNotification
DuplicateHandle
EraseTape
HeapLock
SetLocaleInfoW
SetCommMask
EnumResourceLanguagesW
TlsSetValue

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 27KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE