4453d50f85243024ad551e1738344562_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4453d50f85243024ad551e1738344562_JaffaCakes118
Size

96KB
MD5

4453d50f85243024ad551e1738344562
SHA1

f422aacc834de43fccbbf8b9fe77140b1d097df2
SHA256

42a1f386407fb4a7183deb7a3fbeac5ae9a568648b345abf5e35680550923f1f
SHA512

c6ff11c5e89a49aa291065c83f1d76a302cee238bc057e0c0c49440b83a0fc03dc3a590a8b09c92c2fa3903d81b5478219e6fee4b0b485dce86caf98c1696ee8
SSDEEP

1536:V5+8QchPdOuSuTNUkzbKrU2qVoEFlykirBeRJjWVpIB:z+khVOuSuTNVzbTTyVa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4453d50f85243024ad551e1738344562_JaffaCakes118

Files

4453d50f85243024ad551e1738344562_JaffaCakes118
.exe windows:4 windows x86 arch:x86

84833c99ff192ed01abe32de9c61fc30

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
CloseHandle
EnumTimeFormatsA
Sleep
LockResource
SetHandleInformation
SetConsoleCursorInfo
GetDateFormatA
GetLargestConsoleWindowSize
CreateWaitableTimerA
LocalSize
LoadResource
HeapAlloc
SetPriorityClass
FillConsoleOutputAttribute
ClearCommError
VirtualLock
GetCommandLineA
GetStartupInfoA
ExitProcess
GetWindowsDirectoryA
FindNextFileA
VirtualAlloc
ReadConsoleA
VDMOperationStarted
FindNextFileA
DeleteTimerQueue
FindVolumeClose
RegisterConsoleVDM
GetThreadTimes

Sections

.itext
Size: 4KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

WEIJUNLI
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA