7656edc0fb4672715133d377c3c11d04_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7656edc0fb4672715133d377c3c11d04_JaffaCakes118
Size

91KB
MD5

7656edc0fb4672715133d377c3c11d04
SHA1

81f28b14d00aa004c8901a3e37c74f58e0c46d23
SHA256

032ddfaa03d9d563c5a9c2590a694e81dd8ad70aface217b90cc1f3a5ad32f2a
SHA512

2862f0491053e4d71027f29b73893361b2be2b43caa3e509231ae6787e5840406a1a5d9283dc4b2ddee5bec9c10458c1625491da54df3386e19aa06bbe868ea2
SSDEEP

1536:ijQ4cqiClz2k9tgmcMGTsfxLivL+psvCFENfC7LfpuTcBJvWGj0yJ5ghEWK/7hz0:izBz2k9uTjkxuCOCFQan0TcBJOGj0yJY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7656edc0fb4672715133d377c3c11d04_JaffaCakes118

Files

7656edc0fb4672715133d377c3c11d04_JaffaCakes118
.exe windows:4 windows x86 arch:x86

800ac96e6a76884099af9164cb06bd41

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetExitCodeThread
InvalidateConsoleDIBits
DuplicateConsoleHandle
SetHandleContext
_hwrite
SetConsoleCursor
VerifyVersionInfoW
EscapeCommFunction
WaitForMultipleObjectsEx
SetUserGeoID
EnumDateFormatsW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 76KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE