783969de9ab068b5a3ebe5e399395cf2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

783969de9ab068b5a3ebe5e399395cf2_JaffaCakes118
Size

62KB
MD5

783969de9ab068b5a3ebe5e399395cf2
SHA1

096f0c0f62a685d07dfa2dc09c45bb2afb7bc1d1
SHA256

6c9f7f5efca439e78482346f8dd9fa4163a4a625e1aeb853c1ca81d2f0edc042
SHA512

f1fa5d0de6b48a51a4f9b945432ba14bbda2570b1a08f67c051b37e47a76112fcf88ef6e8ddd974919ea292dc9d5f87e76f9561fccb2f57262798162331bc95c
SSDEEP

768:lhci6VzJvL45V8r/9TsJZFvqXBOLum6zF0g6zFbs9G/IUJ2gtRbv1lobeQGAlxUu:lhcXRJj/52ruhr6zxJJf12tzjvgwFp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
783969de9ab068b5a3ebe5e399395cf2_JaffaCakes118

Files

783969de9ab068b5a3ebe5e399395cf2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e028305196fd9ac3b8490c9893b9d516

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ConsoleMenuControl
ReadFile
FindVolumeMountPointClose
lstrcpynW
LZSeek
CreateMailslotA
SetDefaultCommConfigA
CancelIo
SetConsoleNumberOfCommandsA
CreateTimerQueue
SetConsoleNumberOfCommandsW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE