6828c5b6b184a47c842bc129f27f5fa1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6828c5b6b184a47c842bc129f27f5fa1_JaffaCakes118
Size

56KB
MD5

6828c5b6b184a47c842bc129f27f5fa1
SHA1

4f53540e2ce97d1e542daea7d96b43743f75a2b5
SHA256

d92e1cb82314d6913f08c41ec04e4a8d788edc4200c1b8f5b02e9913f07e37c1
SHA512

c72431e5887df4b8618ba3ae8581026bdc1b53a9dc4e8043651ea10c13bfd9e7a91914e32a832ed4e981be19772226600f124d84b4b371108e777f4b6f214778
SSDEEP

1536:alHSubwyLYeJC8FdMtMF0ixDmVg3CultNV9:alZbjLF9/0y5sjultNT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6828c5b6b184a47c842bc129f27f5fa1_JaffaCakes118

Files

6828c5b6b184a47c842bc129f27f5fa1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

915a77921409b121f460005da868b2f6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsolePalette
DosPathToSessionPathW
LZCopy
GetExitCodeProcess
SuspendThread
PurgeComm
GetConsoleInputExeNameW
OpenEventA
ExpandEnvironmentStringsA
CancelTimerQueueTimer
GetConsoleAliasW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE