664dbde3941670a31da6fa91bffb2c4b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

664dbde3941670a31da6fa91bffb2c4b_JaffaCakes118
Size

62KB
MD5

664dbde3941670a31da6fa91bffb2c4b
SHA1

c724af44bdf87fd6f3dacc71e343eb30c8ebd444
SHA256

bae1f182762bcb25645dfbed0affd9fff86efbf129f540ceb692be7f619adc8b
SHA512

7a3ac3c3ec573ba88af16a840608d7ba6f8504b67bd57ccaad702078f6a9d667d18fff9d813e991b2454ccf7d4d564863b0bfd642388303000ac968f65faff83
SSDEEP

1536:Ipi7pjP4Cl68RVTaJjqXlF7nyzIqUnxoldg:Iop7zVzTckbqGxo4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
664dbde3941670a31da6fa91bffb2c4b_JaffaCakes118

Files

664dbde3941670a31da6fa91bffb2c4b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4b1b356d9da119e86a01f8875c276eac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CopyFileExW
MoveFileWithProgressW
DnsHostnameToComputerNameA
AddConsoleAliasW
UnregisterWaitEx
CreateJobObjectW
GetConsoleCP
CreateDirectoryExA
GetUserGeoID
GetSystemWow64DirectoryA
GetConsoleAliasExesW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE