45d7624cf1b9ee5d08702d2d818d322b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

45d7624cf1b9ee5d08702d2d818d322b_JaffaCakes118
Size

83KB
MD5

45d7624cf1b9ee5d08702d2d818d322b
SHA1

9e10d0c3a50224d0af335e65068f20931eb21432
SHA256

6b9d43f004c8cc2342afa55573b8160549c90554cbceb6b136814e5bd900f916
SHA512

b9ee8e382d60a3afa955d18112886536dd709730f50d1f9aefac1cad3792b098761e2166bcc9a5f959c7cc95fb99d88d3dcaea339ee9289282a39ff452d53c67
SSDEEP

1536:ullllhlbIVnnulDmyxuyy4sVKrGVB3XhyGri1lT0XxpOjEErxTWDTMqhGKYIZTEk:ullll3IuDmEuV4PG333sB0XmjBkMqhGb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45d7624cf1b9ee5d08702d2d818d322b_JaffaCakes118

Files

45d7624cf1b9ee5d08702d2d818d322b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

219ab5e2f1cbabd08584e78a11150623

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LZOpenFileW
GetConsoleAliasExesW
SetConsoleCursorPosition
SetCommTimeouts
GetLinguistLangSize
UTRegister
EnumSystemCodePagesW
GetConsoleDisplayMode
GetCurrentActCtx
ReadConsoleInputA
CreateVirtualBuffer

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE