7076ab4c6ebc9699899a0de01b0bb927_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7076ab4c6ebc9699899a0de01b0bb927_JaffaCakes118
Size

63KB
MD5

7076ab4c6ebc9699899a0de01b0bb927
SHA1

c0e8d0018acf027a06a159bc7b7dffae2746e0ed
SHA256

8594eb21cb759ac67962509abc1fccaf0b521d3c4577ac56397c31b759262788
SHA512

b48edcc2b8162c890c3b2ba419e5996dec4a923a1bdc461a5b48acd9ff3ad77c97e588e41fce8dc5f4dfa3c0e488a4a34d44080bb00f487f5fcd008aeae277df
SSDEEP

1536:2WDFB8157R2cRy0Yw27U+VXi+7hes3pOVNc1HiETlkCxomc4nJEn:3F2EcR7ydXi+D3pOVuBiETlkC2wnQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7076ab4c6ebc9699899a0de01b0bb927_JaffaCakes118

Files

7076ab4c6ebc9699899a0de01b0bb927_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3d845fcc1bac27bdb4f76a90ce53e3f9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCommandHistoryW
GlobalFlags
SetConsoleFont
MoveFileExA
RtlUnwind
WriteConsoleOutputW
FindResourceA
lstrcpy
UnlockFileEx
EnumCalendarInfoW
WriteConsoleOutputW
FindFirstChangeNotificationW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE