4685f9ef0f819df6e9e74f3f31c5406e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4685f9ef0f819df6e9e74f3f31c5406e_JaffaCakes118
Size

63KB
MD5

4685f9ef0f819df6e9e74f3f31c5406e
SHA1

cd47c296122dd8d8b51fd2af9526ade45ce1aa08
SHA256

e0e1613868d93f645b0db81e5c788a1c5a3bdf92cda7347055f974aa6f46c56a
SHA512

b1333963c78d42fb53e255508abbc91b7a1b6c3c21379d3d4af34a23879f445172bae6ffc1bc0112efa30d2a766cb20d607e79ef9b32075d4acf0300186cc6da
SSDEEP

1536:39lW/VevaG2+Nf2bYf0sC/m9/xCvPn/X3+0:32ACG2eO20s//xCv3Hb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4685f9ef0f819df6e9e74f3f31c5406e_JaffaCakes118

Files

4685f9ef0f819df6e9e74f3f31c5406e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3b152d2d7f76d3b6bad643700a02a645

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleTitleW
GetNumaProcessorNode
GetCurrentDirectoryA
DeactivateActCtx
SetVolumeMountPointA
GetDefaultCommConfigW
lstrcmpW
LZStart
SetTapePosition
LZCloseFile
GetShortPathNameA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE