4aecfa5803c1af338cab7ef2dd728bf0_JaffaCakes118 | Triage

Sharing

General

Target

4aecfa5803c1af338cab7ef2dd728bf0_JaffaCakes118
Size

56KB
MD5

4aecfa5803c1af338cab7ef2dd728bf0
SHA1

06929b4d37cb217c58af4171b2302b39169ddfa8
SHA256

6bff3b26c035474944540984e0473132d2a3c7e98a400352278b110ab702609f
SHA512

7c5d731cc74a05f924f08f28cde1be01a57e545c73293b5f61f2ee46c3251e38932dc65e8ab3a6fc3e8723ece68644510abf7a5a6c2ab238cf747fdd1e0862f7
SSDEEP

1536:jccSoYTxv2etviFOHKoQDRP/LIbDCnxKQmBr:QK4h6O2PjI/2YQm9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4aecfa5803c1af338cab7ef2dd728bf0_JaffaCakes118

Files

4aecfa5803c1af338cab7ef2dd728bf0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e2783bf2809fba9655d54b5ea478412a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleCtrlHandler
RemoveLocalAlternateComputerNameW
WriteConsoleOutputAttribute
UpdateResourceA
FindActCtxSectionGuid
Process32First
SetProcessWorkingSetSize
SetFileValidData
GetVersionExW
GetCurrentActCtx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE