46b90e949be4117a92b79dd1ccd89077_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

46b90e949be4117a92b79dd1ccd89077_JaffaCakes118
Size

63KB
MD5

46b90e949be4117a92b79dd1ccd89077
SHA1

98544bfd74f1a8c350feb1bae71e7656f87f56ff
SHA256

ae3137293a8c3d4b5deaa84d02ed5e3c5e5e6672e4a36f971319eac31195ab22
SHA512

2a772672ec1317a16f0c3b267794e926cf40ac87a45c14d38a3b8374b8d1fb66aeed194056eb57d45017f5450c3410939d4da8d2cabd1f4f4319d79bec3c7f5e
SSDEEP

1536:GP+d3zhPAW4fa+qnEPSPy1ynDUCryHJdFEqc:Hd3zRsa+tMKynJupbEp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46b90e949be4117a92b79dd1ccd89077_JaffaCakes118

Files

46b90e949be4117a92b79dd1ccd89077_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ec35460435cdb428fa6ffb904c29464d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadHugeWritePtr
GetExitCodeProcess
WinExec
CreateEventW
WaitForDebugEvent
GetConsoleCommandHistoryLengthW
GetOEMCP
lstrcmpA
GetDefaultCommConfigW
LoadLibraryA
ReadConsoleInputA
SetConsoleInputExeNameA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE