46100aef400407259c8326ddf1833d83_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

46100aef400407259c8326ddf1833d83_JaffaCakes118
Size

92KB
MD5

46100aef400407259c8326ddf1833d83
SHA1

587946639a4a562da030ef0f7c8022ecd7268b3d
SHA256

42a644b204e6240ca873496e0f25a339f9c36fa6ad4aa4a46793eef25dbf4c3e
SHA512

5b1df994899be035b56a67374d60b3d1d4eab5ed4ea1cec572bfac3d7bc3f45dcf9360c270b5a92e565263e5b0278f20d4e65a82ad86f07c727f1b15f63f25d5
SSDEEP

1536:8KerHx4DrpbTxCvy37G0kn8/nloMMhAYSoRnF0bhCS:8XrW/xd37LknaloP2ocbMS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46100aef400407259c8326ddf1833d83_JaffaCakes118

Files

46100aef400407259c8326ddf1833d83_JaffaCakes118
.exe windows:4 windows x86 arch:x86

529156a9f8c7550794a9c7ae46357bb4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
CloseHandle
VerifyVersionInfoA
WriteConsoleOutputAttribute
InvalidateConsoleDIBits
FindVolumeMountPointClose
GetPrivateProfileStructA
CreateIoCompletionPort
WritePrivateProfileStringA
ReadFileEx
GetCommandLineA
GetStartupInfoA
ExitProcess
SystemTimeToTzSpecificLocalTime
ReleaseSemaphore
GetMailslotInfo
FlushConsoleInputBuffer
lstrcatA
SetCommTimeouts
GetCommModemStatus
WriteConsoleOutputCharacterA
ReadConsoleInputExA
GetTickCount
WriteProfileSectionA
GetSystemTime
GlobalLock

Sections

.itext
Size: 4KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.date
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

WEIJUNLI
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA