46406338fd3deb435ab30a0921ea6b76_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

46406338fd3deb435ab30a0921ea6b76_JaffaCakes118
Size

29KB
MD5

46406338fd3deb435ab30a0921ea6b76
SHA1

a69df39123ea2538eb2924814506a9e2812a3164
SHA256

15e5a0dbbb2f3214d50062834649044b235970299c9c3c14d1b8b7b2325aac64
SHA512

ade5bba6dcc93f46caa7add1de0924006fb3cef82bd448041f0a79e4b1aefb6c9250f2351829765004bcc48a637273ea6a5b618b7d5641019f27961fb4e92fe4
SSDEEP

384:wq8DgWxDaYH5p4zNQxAJQCKoJNz+aEDFCVX40HnAjNA2n8yLaz8wiYsd7D3g:w/DgWxdczeNoJRBE+40HU+GYsd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46406338fd3deb435ab30a0921ea6b76_JaffaCakes118

Files

46406338fd3deb435ab30a0921ea6b76_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c0641db0659e555bfa6694e4f632f22d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BackupWrite
GetConsoleFontInfo
GetTapePosition
GlobalUnfix
FindNextVolumeMountPointA
GetAtomNameA
GetBinaryTypeA
EnumSystemLanguageGroupsW
CreateEventA
lstrcpynA
GetTapeStatus
GetProcessAffinityMask
GetProfileStringW
CreateTapePartition
lstrcmpi
EnumCalendarInfoExA
IsValidLanguageGroup
LoadLibraryExA
SetConsoleCursorInfo
OpenSemaphoreW
GetVolumePathNameW
RequestDeviceWakeup
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.code
Size: 4KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ