62500ee7bed2dd9733e2efb3b1ef845d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

62500ee7bed2dd9733e2efb3b1ef845d_JaffaCakes118
Size

67KB
MD5

62500ee7bed2dd9733e2efb3b1ef845d
SHA1

e0b4bfc21dcb73155da758affd695e60185d9a32
SHA256

e9c764ab8194c55443e4838b1cba9fa0c43aa2cfa1e57a00561abda0c513bd81
SHA512

ffddf52c55336fd156db4de25886fa6627b05619642a72f041f5490f45b689611350191136abe305a9f5c5bb53887f65507fa6deb944ba401576b9fe8fbf6f28
SSDEEP

1536:hhvsN5m0Gm1Tm8JKTRv+tIpqDuHm+s1dx/o0+8sueHHspJv9TmZ0cJK:hhi5ym1PJqi25Gv17dsbHspJcZlJK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
62500ee7bed2dd9733e2efb3b1ef845d_JaffaCakes118

Files

62500ee7bed2dd9733e2efb3b1ef845d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5eee95604189f4412e20b6dcb3cf105c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReleaseSemaphore
GetConsoleCommandHistoryLengthW
SetNamedPipeHandleState
EnumResourceTypesA
RemoveLocalAlternateComputerNameW
GetConsoleKeyboardLayoutNameA
SetCurrentDirectoryA
GetCurrentProcessId
GetProfileSectionA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 52KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE