759adde089964b457a5be096eb89032f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

759adde089964b457a5be096eb89032f_JaffaCakes118
Size

62KB
MD5

759adde089964b457a5be096eb89032f
SHA1

3af49210227b249fc395ad7773a4dfb657d5d10f
SHA256

805a6ed1197d2cc2d2447f00c990df5230cf3f5825fd8eff2f6f9ca900f72686
SHA512

ea919826f51b7ce539bf80c34de85f48acbbb2ad576471da115c7579133a534eca2ed3f4fb186f4661e74119186d841b5870c1ae3c5f21e64b377edf507071f2
SSDEEP

1536:PSsyKN/6Sp4FsZylOo/BaQU8BPe/2CCCwukhCEHAO5:dlFh4Oo/PUY2e9njD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
759adde089964b457a5be096eb89032f_JaffaCakes118

Files

759adde089964b457a5be096eb89032f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e1f9ee12a3fe45199c2d8f04bb273416

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreatePipe
NlsGetCacheUpdateCount
VirtualLock
GetCommandLineW
GetConsoleKeyboardLayoutNameA
TerminateJobObject
LZRead
LZCopy
FindNextFileW
FillConsoleOutputCharacterW
LZCopy
GetSystemDirectoryA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE