4c368c1c2ceeec7b96937a1c0c3080f5_JaffaCakes118 | Triage

Sharing

General

Target

4c368c1c2ceeec7b96937a1c0c3080f5_JaffaCakes118
Size

56KB
MD5

4c368c1c2ceeec7b96937a1c0c3080f5
SHA1

d00fbd5b4f00318af0684f9dd4228d8fca6dcb80
SHA256

1d73b721aebf61b632832af1b6700272fdd0314f3eee00d46c402f9bdf963c24
SHA512

353a3c745ef8f87d0a348404dc77b60294e9e431479dfc114e5257806f80d5a7810ec26a54dc2e43ba8307203dfe4000352c4b9ace518516551338800bc04999
SSDEEP

1536:3+qLdsicCrISjRf99/dOdEFJEs+K/ZYvCxtyPKLF2RvB6:rdsiFr31B5F6jK/+0Osb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c368c1c2ceeec7b96937a1c0c3080f5_JaffaCakes118

Files

4c368c1c2ceeec7b96937a1c0c3080f5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7b8716fc3e3c229bc109ffb89b2fd0b7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadConsoleInputExA
Thread32Next
DosDateTimeToFileTime
GetCommModemStatus
FileTimeToSystemTime
InterlockedPopEntrySList
UTUnRegister
GetConsoleCursorInfo
GetConsoleAliasesLengthW
GetDiskFreeSpaceA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE