760113190968a86c1ce486aa2f505226_JaffaCakes118 | Triage

Sharing

General

Target

760113190968a86c1ce486aa2f505226_JaffaCakes118
Size

94KB
MD5

760113190968a86c1ce486aa2f505226
SHA1

9ba5e22d334c0468c23c0e887fc1e2d114cde40e
SHA256

ae01adf6b9e36e4fee2b304cb993abdbbfd789ffd369854367d5eca93e15e428
SHA512

a63118b549938e1d53054b92dcf27fc2d2e90ff6319cf7fbfa9b4f6cf11913a396ba29e63f719f4b4eaa12e63c1550e1cdf02ec63c4db7e7157ff62e0037253f
SSDEEP

1536:iCnL7EiDAkecNYxrdvCWVsg2mOzzT8ZDdkc8YaEJwZK4/83ZoMOAdL5wTc:lnLwiFepxpvCWVl2Rz0DdkhZEXtpxdLR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
760113190968a86c1ce486aa2f505226_JaffaCakes118

Files

760113190968a86c1ce486aa2f505226_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ebacef6d59b2b00a2f208c1f855ccd44

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCommandHistoryW
SetConsoleNumberOfCommandsW
GetLargestConsoleWindowSize
GetVolumePathNamesForVolumeNameW
GetConsoleOutputCP
HeapUsage
BackupRead
GetFileType
GetVolumeNameForVolumeMountPointW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.krdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE