4ddd4f4b3dbe9477f04a4e4a24cb359b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4ddd4f4b3dbe9477f04a4e4a24cb359b_JaffaCakes118
Size

86KB
MD5

4ddd4f4b3dbe9477f04a4e4a24cb359b
SHA1

1b9736aedd037a4784444c63f85f8d21e291d919
SHA256

29831af248d4f30110052e749610f1a1df133a09c5a3c814d539db2c65eab9f7
SHA512

7d184ee67cd8019b903f44b6a9fa665952edce2e2a6af2c0123c8a54abbeae505c4a5283f86601272076e538f4f4675ceabeb9cce23b38d9c5bebd0a91076cec
SSDEEP

1536:MVEHUA38aG2SfKhBiUtHikJ15dnThFNWoWDbnrWtXYRNf1BnJNP7dcf7T61s5VaR:XV38aGMhBdHLJpThFeDbnr4YRNf1Njd1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ddd4f4b3dbe9477f04a4e4a24cb359b_JaffaCakes118

Files

4ddd4f4b3dbe9477f04a4e4a24cb359b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

94bfc7294c1032573a7e892539f92648

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetHandleInformation
GetDefaultCommConfigA
LocalSize
CreateJobSet
HeapQueryInformation
GetConsoleAliasesLengthA
SetConsoleHardwareState
EraseTape
ResumeThread
GetEnvironmentVariableA
_lwrite

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xrdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE