4762a0b82b82bc8ba3430db6052ba410_JaffaCakes118 | Triage

Sharing

General

Target

4762a0b82b82bc8ba3430db6052ba410_JaffaCakes118
Size

83KB
MD5

4762a0b82b82bc8ba3430db6052ba410
SHA1

1bf955452d6e6d850b8fff4157580ba087e05d3f
SHA256

63ea026e1856908f015f7a180b7345c105e7ffd6288ba876f809dfc9093a4bf1
SHA512

b7bf2dd7f59ec8555261cbd1090383781d838859a2f7d7dcc7e09f87ef72df3a496054bdece4342762f0f92d8c4cff1aa6ca2888345062d029d2a75e5daaf7e8
SSDEEP

1536:sLSoSuq0JhY8+iq0gXECnXE3TB6CEjFpldAL2+iJzh7pjVrs2ryrd1vUQuqKsw:s3qCGnikTnXE3TsCEZpldk2lJzh7Hs2F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4762a0b82b82bc8ba3430db6052ba410_JaffaCakes118

Files

4762a0b82b82bc8ba3430db6052ba410_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4d79c23970d70e7b182ca4350e647616

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFileScatter
LockResource
ExpandEnvironmentStringsW
GetConsoleAliasExesLengthW
lstrlenA
BuildCommDCBA
DeleteTimerQueue
EnumTimeFormatsA
ReleaseSemaphore
GetConsoleScreenBufferInfo
Module32FirstW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE