71c09155484381e46524d7d7c215f12e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

71c09155484381e46524d7d7c215f12e_JaffaCakes118
Size

109KB
MD5

71c09155484381e46524d7d7c215f12e
SHA1

4958981c1219ddaa1bd3176696b78db29046344e
SHA256

04e955f46fe1fbf3248c2b21216b2bddae02384656586afbd16e1f60eebde26e
SHA512

5e68c6f4698b3639c536ee3e7a8bfecc34d334e00fe4d6ba04ce69b8f593d72a8d33425da6efa9f3705be769e45dc6b22bb4a8642612dcded7a9cdbcc552287a
SSDEEP

1536:rYGwy4JZ7HxNmaJZ2ADTc0fFo9ofxqsviYh8U+/KYu7FtCgOyAON7BFHTdvztBUF:Xwbf7DmaJn/zdo+fa/KYGt3OHaFBNX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71c09155484381e46524d7d7c215f12e_JaffaCakes118

Files

71c09155484381e46524d7d7c215f12e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5097ede821b9189b124e4ee4dbab7459

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BaseProcessInitPostImport
VerifyVersionInfoW
SetConsoleMaximumWindowSize
BasepCheckWinSaferRestrictions
lstrlenW
OutputDebugStringW
ReadConsoleOutputCharacterA
GetProfileStringW
GetProcessAffinityMask

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 85KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE