4c9c6843608ab45fbfba1baa6d2e033c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c9c6843608ab45fbfba1baa6d2e033c_JaffaCakes118
Size

56KB
MD5

4c9c6843608ab45fbfba1baa6d2e033c
SHA1

14962f8e4221e06e7fcf6953327fcf10fa971605
SHA256

ffd81ba6a064819b761a4d7bd4a514302631fb6bd41f9a161059e951005a54b9
SHA512

4366f7e99e05edccbad7428b1fec2d4289aa4aad82b1241ed86754ad80d06dbc972ea54de046a9ce9cae5757d2574ca04d50940d654d7b9fe05997669ac8680f
SSDEEP

1536:A3gqYT0TW80bYVQfLj2TMopiaZa0pS76uMqZTr4:AYT0W8puLj2Yopia5pl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c9c6843608ab45fbfba1baa6d2e033c_JaffaCakes118

Files

4c9c6843608ab45fbfba1baa6d2e033c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a1a5fe0b8dba62fdc5c944b2c595b57c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MoveFileA
CreateDirectoryExW
LoadModule
HeapExtend
GetStringTypeExW
ConnectNamedPipe
CreateFileA
BuildCommDCBAndTimeoutsW
WaitForDebugEvent
GetFirmwareEnvironmentVariableW
DnsHostnameToComputerNameW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE