49d9db5e81754b2eb4f07350ee91af8c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49d9db5e81754b2eb4f07350ee91af8c_JaffaCakes118
Size

62KB
MD5

49d9db5e81754b2eb4f07350ee91af8c
SHA1

d1cd78105d1da1d561446a7e5984451999350c8b
SHA256

b5c3c872dab0deb747889899781d72dd1013958d00ff867cc5f71f7ebadce92c
SHA512

f545e7100b367d0a995efc00746dfd9a9c77151ef48918c828d3847aa767823b584fd0c0b9eee8c2d198b548eba74bfc780fea626b04bec98e49464d28688a9d
SSDEEP

1536:e0LGhstdJ3NZf9IOSI7zWI0sn3i2SS0P+p:/GytbNZf9V10s3SnPw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49d9db5e81754b2eb4f07350ee91af8c_JaffaCakes118

Files

49d9db5e81754b2eb4f07350ee91af8c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

138f4097fcca5c08321e66814d8f66a9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessWorkingSetSize
DuplicateHandle
GetFileAttributesA
lstrcatA
SetErrorMode
GetNumberOfConsoleMouseButtons
SetCriticalSectionSpinCount
WideCharToMultiByte
VerifyVersionInfoA
IsBadHugeReadPtr

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE