65c90afa94eb38f94aca168ef17ef34c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

65c90afa94eb38f94aca168ef17ef34c_JaffaCakes118
Size

83KB
MD5

65c90afa94eb38f94aca168ef17ef34c
SHA1

8e78ba1949f57a41c956aa9c4c6ce8d937b59d44
SHA256

2918fa824fef7d38ae227a47685648e5e07f4b170f50124f7049d90f6499eea1
SHA512

c927ac6bb57b85b288338753ce205f5c54669373df03626d15dfe71f40d752c4f767108e0521949953e8909f3104f4b563caa058d466a1a75d9c29ab2a5ad3b4
SSDEEP

1536:6FBX2UVxVBKle6Qxna5XQz3lHqSdyT/jEErxTWDTMqhGKYIZTET8bDQ:qx5uk6Qxa5XRScT/jBkMqhGKZTbbc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65c90afa94eb38f94aca168ef17ef34c_JaffaCakes118

Files

65c90afa94eb38f94aca168ef17ef34c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

40e367aedb162310c95960c9af7edd4c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AddVectoredExceptionHandler
SetConsoleFont
ReadFileScatter
RtlMoveMemory
GetConsoleAliasesA
QueryDepthSList
RequestDeviceWakeup
BaseFlushAppcompatCache
PurgeComm
RegisterConsoleOS2
TermsrvAppInstallMode

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE