72d7e0cadc58f7945345cded1869c836_JaffaCakes118 | Triage

Sharing

General

Target

72d7e0cadc58f7945345cded1869c836_JaffaCakes118
Size

56KB
MD5

72d7e0cadc58f7945345cded1869c836
SHA1

24f25d1a1c28ddf450725e2055c6002a3bcc3466
SHA256

d68efdc18a1c6a0e5a4655e37060076b6db104bf5f6206287a0f5e475d863925
SHA512

69c2bcc5763d973d478baaade03f0f960e3fffac149bc07e6c0bd2ed99b56184dbedd7d2b4c6bc79915c38c046f537d6cfd99e56d3dc66814803427060eea1bd
SSDEEP

1536:6co8t93yLtcw91nr9vT+5lBjfUm4FGzv/:6cv934tccpr9vT+5lBj8m4E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
72d7e0cadc58f7945345cded1869c836_JaffaCakes118

Files

72d7e0cadc58f7945345cded1869c836_JaffaCakes118
.exe windows:4 windows x86 arch:x86

038cb82fe9d0527b6eef622543ef165b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadConsoleInputA
GetConsoleAliasExesLengthW
MapViewOfFile
GetProfileSectionA
SetInformationJobObject
GetNumberOfConsoleFonts
SetFileShortNameW
AddConsoleAliasW
OpenThread
FillConsoleOutputCharacterA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE