59ab03458ade4089208b210a6daf5db9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

59ab03458ade4089208b210a6daf5db9_JaffaCakes118
Size

212KB
MD5

59ab03458ade4089208b210a6daf5db9
SHA1

f2cc5736e55acc1913f7dbd07932265e8098beae
SHA256

90217c3a6bfc592941b23bfbf814fbc43c4e1f01d9362eff69fcfbfe67ce0a38
SHA512

20f4b38603ddf86ab784d34b844581864bb87739563f1436df3c75b304b2b4fc69a59aa47ee28536f91676a6b2321329cb770c60b2536dd0cd2cb0d7aa680ca7
SSDEEP

6144:dFpfvOMM7F2aihuJh+AsDn4WYEFh8D40sExHblp:bps7HitmMh8D2kHbl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59ab03458ade4089208b210a6daf5db9_JaffaCakes118

Files

59ab03458ade4089208b210a6daf5db9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a770fa10d2282fbde0d361475d6d8be9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FlushFileBuffers
HeapDestroy
VirtualQueryEx
GetCommandLineA
GetTempPathA
LocalUnlock
GlobalGetAtomNameA
WinExec
ReadConsoleInputA
VirtualAlloc
GetProcessPriorityBoost
GetFileAttributesExA
DeviceIoControl
InterlockedExchange
DeviceIoControl
GetConsoleTitleA
GlobalMemoryStatusEx
EndUpdateResourceA
GetWindowsDirectoryA
GetConsoleInputExeNameA
GetCommandLineA
WaitForDebugEvent
GetConsoleCP
_hread
ExitProcess
GetLogicalDriveStringsA
SetFileShortNameA
AllocConsole
LocalFileTimeToFileTime
GetCurrentDirectoryA
GetLocaleInfoA

ws2_32

send

Sections

.itext
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 168KB - Virtual size: 824KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ