7717880bdc5dd9612ca11d56f0f28a6a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7717880bdc5dd9612ca11d56f0f28a6a_JaffaCakes118
Size

83KB
MD5

7717880bdc5dd9612ca11d56f0f28a6a
SHA1

0505f23aad639e726119e31268852902bee6c8bf
SHA256

e34ee89f613bdf92fd4297f125f029a3f7cd801415a72d22764b3e5ecff0f831
SHA512

ad0ec1df25bf4fd8c3a9699e1ed3727d2d59cc1512cf11306ac605a55e0da11cfe324a5473886a11f2e3fc7bb1e8dc05bde0f9b7e6bd019203700091a97a7bab
SSDEEP

1536:NVGgHcCuiSspWjGpH5W11S+kOFz+ZtSqX8ajKEjEErxTWDTMqhGKYIZTET8bDQ:OqcwSJGtrbOF6VNjBkMqhGKZTbbc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7717880bdc5dd9612ca11d56f0f28a6a_JaffaCakes118

Files

7717880bdc5dd9612ca11d56f0f28a6a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fb0c6057b07ff2928cc3577f206a2fcf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
FormatMessageW
GetThreadContext
EndUpdateResourceA
FindActCtxSectionStringW
_llseek
QueryDosDeviceA
_lwrite
SetConsoleActiveScreenBuffer
AddAtomW
GetCommMask
CloseHandle

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE