48ecb786cda961e8522e38edb868547f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48ecb786cda961e8522e38edb868547f_JaffaCakes118
Size

56KB
MD5

48ecb786cda961e8522e38edb868547f
SHA1

48b0e6abf842fa4fdb04b2cdefd7d378d2b46226
SHA256

87c0dc1f1b97316452b2f0bb790c6370b018d131d694b5fdc6dc8db12113ed85
SHA512

113e15cc402a0d6c897af539f4da31b684a47682faecaa8457ca5f8e854689bba3a37af1ddbd6104250547066ac8f0c0d0840bcb1a0bf78ae1ba2adbc8dd67c0
SSDEEP

768:A5Dn6LGGbzqU7GNzN0vZt3MnNG/3uyPEzlUNHxN6/K3Pun04+WD6ZhMQ8ra9ETYN:Ag5F2ywlGxdu0GmZh8FejWeO7Ps

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48ecb786cda961e8522e38edb868547f_JaffaCakes118

Files

48ecb786cda961e8522e38edb868547f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1097473958faf6d1302bb6525fd71801

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadConsoleOutputAttribute
EncodeSystemPointer
LoadLibraryExW
GetFullPathNameW
SetComputerNameW
GetProcessAffinityMask
SetCPGlobal
CreateRemoteThread
GetCPInfoExA
GetNextVDMCommand
FillConsoleOutputCharacterA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE