4db8377b724d18f7bd532f22702fbf0f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4db8377b724d18f7bd532f22702fbf0f_JaffaCakes118
Size

32KB
MD5

4db8377b724d18f7bd532f22702fbf0f
SHA1

3226323fbdd9d6e8c259d37349b0debb1d368528
SHA256

c1b3164484b01d0bb146c3982ee9f57a6c726b21ada6e1e3d7413affba00e722
SHA512

53551431f01384545d87630312d80e02ac916673e0deaf0b56f0c50865d60654a7bdcf20fd35944f2d14fa5784e0d55582b140065839652a7de53230cc292ec4
SSDEEP

768:5kOJiQfrGhJOVGLyqvxyMZ9rG1LYYQ2GarScR:30W+8ITvxy69yQG+cR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4db8377b724d18f7bd532f22702fbf0f_JaffaCakes118

Files

4db8377b724d18f7bd532f22702fbf0f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2231ee8aca6da8c0c1f6017d6f8fd58f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
ExitProcess
GetStartupInfoA
FreeConsole
GetCalendarInfoW
GetTimeFormatW
UnregisterConsoleIME
HeapCompact
DosPathToSessionPathW
IsBadReadPtr
ScrollConsoleScreenBufferA
SetThreadPriorityBoost
GetProfileIntW
GetStartupInfoW
SetConsoleMenuClose
lstrcatA
GetCommandLineA
GetTapeStatus
RegisterConsoleVDM
LoadLibraryExA
DosPathToSessionPathA
IsValidCodePage
SetLocaleInfoA
SetMailslotInfo
BuildCommDCBW
LoadLibraryExA
GetConsoleAliasExesA
GetProfileIntA
GetProcessIoCounters
GetProcessVersion
GlobalAddAtomA
ReleaseSemaphore
LockFileEx
SetMailslotInfo
MapUserPhysicalPages
EnumCalendarInfoA

Sections

.data
Size: 4KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ