4c4c9fc121a06844e5ba9c5e7253025f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c4c9fc121a06844e5ba9c5e7253025f_JaffaCakes118
Size

1018KB
MD5

4c4c9fc121a06844e5ba9c5e7253025f
SHA1

2de44708f555b6f0d1c045ee6eafcffa47c506db
SHA256

37bc985ccabc1df72c463369ac2c86f1c514438ef321bb499c02eee5fcd0de14
SHA512

d5cf9de97d6d4a124ad774c0a395f8f6f34116fca8e4c6c137b8e7ad614b1a5a3c0b205c7ab295dbbf2a07f9bbe69753c0237ef4574d0aed8cfb0289ac9c576b
SSDEEP

1536:9srVonK1hDhjNRS1EUBmXRk5SlWxcRGe4gEVoWZVtM/VAkMe9L:9pK75NRS1dw8SUeP6X2/V+S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c4c9fc121a06844e5ba9c5e7253025f_JaffaCakes118

Files

4c4c9fc121a06844e5ba9c5e7253025f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

90d6688fab5ea125a6d2cb2ab65a6fed

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetProcessVersion
GetConsoleNlsMode
AddConsoleAliasA
ContinueDebugEvent
CloseHandle
LocalFree
GetCommandLineA
SetVolumeMountPointA
PeekConsoleInputA
GetNumberOfConsoleFonts
SetHandleInformation
SetConsoleTitleA
GetCommandLineA
GetStartupInfoA
ExitProcess

ntdll

NtSetTimer
NtCreateFile
NtOpenEvent
NtReadFile
NtDeleteFile

Sections

WEIJUNLI
Size: 4KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.adata
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ