759f9218aed938cbce2c5a3ee7b34592_JaffaCakes118 | Triage

Sharing

General

Target

759f9218aed938cbce2c5a3ee7b34592_JaffaCakes118
Size

56KB
MD5

759f9218aed938cbce2c5a3ee7b34592
SHA1

af9ae7b0e244fa14aac6979ccd85117abdddb115
SHA256

c02addf6ed7ba5735f554e0047a31dc0d612ea4caffe2ab7c4adc5205ad7d476
SHA512

1cb0fe07c8d47f35ce2d126f2bc19348429e26bbc60584ea5cd98fbbc0887017129bf3ce0d879b13ecce1646b57495075fb68029f9e84b39f3a663687d2f679b
SSDEEP

1536:Ib/2Rs+sFSOPfowPJxoAvxGirnB3yMRXKfRu:IUnsQOPfT3oYGizBGfw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
759f9218aed938cbce2c5a3ee7b34592_JaffaCakes118

Files

759f9218aed938cbce2c5a3ee7b34592_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b7e23bdaaaa310632bd1795284161353

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessInternalA
SetCommMask
FindVolumeClose
GetSystemWow64DirectoryA
BaseProcessInitPostImport
WriteFileGather
GenerateConsoleCtrlEvent
SetComputerNameA
ReadConsoleOutputCharacterW
CreateActCtxW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE