6164cac0936f5382e2d50f8e0f63fa65_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6164cac0936f5382e2d50f8e0f63fa65_JaffaCakes118
Size

56KB
MD5

6164cac0936f5382e2d50f8e0f63fa65
SHA1

2ba5fe7375ce7f0a9af12775c31a38982164cdf6
SHA256

a833bfe8389099fd693ae4b90b779e5ea4710d3cc8372201dbd60ae358ca7943
SHA512

a77dfc38b390506c3e2f9a08baa6aa4dcd050acbd271a39915293dfc587c33040e70db51fb5057844404ebf6afbaef96cbfae93f4cba35340c098cbce2fd93f7
SSDEEP

768:rk1oTfGqrJrHbSCSd77GmX0IDqEnvRIxDpBB5stkosj/VAzkUswuTMBYq22Yl3Np:r8YKWT1WzvL+32KykU4fhSbYD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6164cac0936f5382e2d50f8e0f63fa65_JaffaCakes118

Files

6164cac0936f5382e2d50f8e0f63fa65_JaffaCakes118
.exe windows:4 windows x86 arch:x86

627823e333ca61ebb1f9064bda46e7d7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ConsoleMenuControl
FindNextFileA
FindFirstFileExW
SetConsoleCtrlHandler
GetWriteWatch
WaitForDebugEvent
GetThreadLocale
GetConsoleCommandHistoryLengthA
FindFirstFileExW
Module32NextW
_hwrite

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE