46593c7033669f8f7ba1977a764b6e14_JaffaCakes118 | Triage

Sharing

General

Target

46593c7033669f8f7ba1977a764b6e14_JaffaCakes118
Size

56KB
MD5

46593c7033669f8f7ba1977a764b6e14
SHA1

646abec9e4eaa84f1653ca40101fc4d1fc39919d
SHA256

77d0ab79fc1b3bbbd662e5d87c89e40ea2263cb32383762a8206e8a4b528f138
SHA512

3cef29edaf460faee300e0e92abea0769b300bebd6bd1cdb061153bb9e16cb4fbcf6157d8789b1969c721e0a007396a5c271065b22b1cc685754482f6e8a1939
SSDEEP

1536:hP/rvGJMQBnFTblwkN/CTEbU9lGqN7blOcYYK:x/rvGJMQbTblwfTEbalJRZOcYYK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46593c7033669f8f7ba1977a764b6e14_JaffaCakes118

Files

46593c7033669f8f7ba1977a764b6e14_JaffaCakes118
.exe windows:4 windows x86 arch:x86

468cffbabbdb00b1538452fafb4fd8c0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsDebuggerPresent
HeapDestroy
SetConsoleWindowInfo
SetCurrentDirectoryW
GetProfileStringA
FindActCtxSectionGuid
SizeofResource
CreateTapePartition
LCMapStringW
GetConsoleKeyboardLayoutNameW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE