452764edb0b4407f6d0a87ac1dac609a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

452764edb0b4407f6d0a87ac1dac609a_JaffaCakes118
Size

83KB
MD5

452764edb0b4407f6d0a87ac1dac609a
SHA1

c58a664b2d5ff631cc29722a531f36bcec323e9b
SHA256

0ee7fe7b601c918c2874e16ea493e40a8591c7d8d8b648a701e19de751c7935e
SHA512

4a9792f71d2a1813684a2f61d1d76804a0d9d0cf96bb8a79cd3351e511fa51e6ea22742a2643f7d86a1a31b5a4b00de258e429657df37223c0bdb99880fa8d7c
SSDEEP

1536:jInnnn2eUelvxJ0aUetErKgxRxqB+7kyVYsTZjnT2RjEErxTWDTMqhGKYIZTET87:jInnnn2e1vxgycxRxeg1jhnYjBkMqhG4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
452764edb0b4407f6d0a87ac1dac609a_JaffaCakes118

Files

452764edb0b4407f6d0a87ac1dac609a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3faafbf459d7463cc1ad2e74b1b44436

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleMode
InterlockedPushEntrySList
DefineDosDeviceW
InitializeSListHead
SetConsoleTitleA
VirtualAllocEx
SetVolumeMountPointW
GetOEMCP
PrepareTape
GetFileAttributesExW
GetDriveTypeW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE