7463f01370ce99f5288c10187a9cbc73_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7463f01370ce99f5288c10187a9cbc73_JaffaCakes118
Size

68KB
MD5

7463f01370ce99f5288c10187a9cbc73
SHA1

4660d8dbefe227b734087dbf74fe652d8ce177ee
SHA256

3e209d29da94384059863ba1758de7a2e0dd68a66fc9418fe3d5c8139dd7807a
SHA512

2134af560d82a5e8313ad5e42fa8be3354b240fbcf20d463c2e0b5301f90061d1b0c7c07651cf81e586078edfb5a4aaca2a7091feed50d14b75021814cbffcbf
SSDEEP

1536:S5OQbtaLw7fhuT7kAt4vePrspqj/CHhZ8xJmfG9if:4OQbMLTsxePr6qGHLeg6if

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7463f01370ce99f5288c10187a9cbc73_JaffaCakes118

Files

7463f01370ce99f5288c10187a9cbc73_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f226caad5841878f79e504cd4ab10e61

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetThreadContext
GetCommConfig
lstrcatA
SetConsoleWindowInfo
GetProcessTimes
GetSystemDefaultLangID
MoveFileWithProgressA
FindFirstFileW
EnumDateFormatsExA
EscapeCommFunction
ReadConsoleOutputCharacterA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 36KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE