4d284acf1b528e5d0be08f3129d21e19_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4d284acf1b528e5d0be08f3129d21e19_JaffaCakes118
Size

56KB
MD5

4d284acf1b528e5d0be08f3129d21e19
SHA1

a7432eaa8088175c84d8ea0d9d06f4df8466869e
SHA256

8fa13f8a7a48387f3acfd024d377e2827549c589dc33a6eb48b864557c709c85
SHA512

fab085f25d0a7f240e08d086ae58ebe75ba0a4751c6f822de43a234429a8a3d8a6240538019745785a2fb21933e9a5eaca097cda3f63967f813b5095a219372f
SSDEEP

1536:FWwCPJbTMv0ElFylqyMLiipIiHzDGzDiyV+/l1FMvuz0zclM:PEJbTW0kF0zMeipIiHSDiOwl1FdIz8M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d284acf1b528e5d0be08f3129d21e19_JaffaCakes118

Files

4d284acf1b528e5d0be08f3129d21e19_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b37cb1a8bb924184cea48a4b73c794d5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenFileMappingW
SetConsoleCursorInfo
BuildCommDCBAndTimeoutsW
CreateHardLinkW
BaseFlushAppcompatCache
EndUpdateResourceA
TerminateProcess
CreateTimerQueueTimer
Heap32First
GetWriteWatch
WritePrivateProfileStructW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE