456f65f7c6b3a1394af541d1b909b966_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

456f65f7c6b3a1394af541d1b909b966_JaffaCakes118
Size

98KB
MD5

456f65f7c6b3a1394af541d1b909b966
SHA1

b777140cc31e5d2289fe9f419a45276a82fb3ee2
SHA256

b66ef9d74c3d42306a0ebac760934301887628743f564bbbc05bd28eb9318e51
SHA512

b238a8ac242ec62e1680f3da1fd3779924674e48c49500ddf2492c821a4ac9fe4961f5ee3b48623371c5194d801361f96097db41f1bc3a60dcefd047bc5b27c9
SSDEEP

1536:dGiR9kD5S269gjjTC1PL8lW9LD6Q8ljIFhl8mz81yhB3W/yBgbfhTwduLQRrxbsZ:hKYTm2V8Q9f6Q8lsFHamBm/yBgbpTwVQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
456f65f7c6b3a1394af541d1b909b966_JaffaCakes118

Files

456f65f7c6b3a1394af541d1b909b966_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c56176b9885264996cc6471843d9f225

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFlags
UnregisterConsoleIME
GetTimeFormatA
GetConsoleCommandHistoryLengthA
SetConsoleOutputCP
GetLogicalDriveStringsW
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.text
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE