49e84b6cec612bb90f222d5cc40354dc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49e84b6cec612bb90f222d5cc40354dc_JaffaCakes118
Size

83KB
MD5

49e84b6cec612bb90f222d5cc40354dc
SHA1

b9af38101d36419202e1bd6a521ba1618808a4dd
SHA256

7699092a0fda8271a63a5f3eb87bc9ebddb29783e5e0abbf0de947e351205604
SHA512

ba83840875630e84ccd07905bc7fe940a3fe28a27164a8a0991075930633375781161da43ed140da780a57f8ffd0bc4e1398ef4d59aa70505c0d985e1d139f07
SSDEEP

1536:a+oibq3pa9UiCD2qM9QRg3qxW+nBROaMlNpjEErxTWDTMqhGKYIZTET8s0C98:a+oibq3pa9KSMRJW2MlNpjBkMqhGKZTX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49e84b6cec612bb90f222d5cc40354dc_JaffaCakes118

Files

49e84b6cec612bb90f222d5cc40354dc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

271ea60a7793415b1bbc3ab858974eed

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleOutputCP
SetMessageWaitingIndicator
GetProcessIoCounters
RegisterWaitForSingleObject
EnumCalendarInfoExA
WritePrivateProfileStructA
RtlCaptureContext
EnumResourceTypesW
ClearCommError
GetConsoleAliasExesLengthW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE