8279660ced42143ac1a5c4da69986fb3_JaffaCakes118 | Triage

Sharing

General

Target

8279660ced42143ac1a5c4da69986fb3_JaffaCakes118
Size

31KB
MD5

8279660ced42143ac1a5c4da69986fb3
SHA1

cfb4397b344e07db1405e47a0dbb056816993619
SHA256

61d3b27dcc7eb30038b08fc4bce46eb38d5040a9b63b27b6045b2a64177dd3c0
SHA512

cc6e6f9611210e351560d41a9ab193af5e648357496bed1b5b812c1a9614bd030d146882b97cc8a3dfa84bd0966fc35b0e44b205368e747cb23c197f1b12e1b1
SSDEEP

384:/Nc6cSoKDsBUqBohOLgO6+1DOZzruruoy25G+2/8h9F3zP+J2buWnKhcWWmKqvlR:vhD6U/I968DOdnoX5QaFjXePLvlR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8279660ced42143ac1a5c4da69986fb3_JaffaCakes118

Files

8279660ced42143ac1a5c4da69986fb3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c1f1b95fd14338f163af9da5ba663b8e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
ExitProcess
GetStartupInfoA
SetThreadPriority
GlobalReAlloc
SetConsoleMode
DuplicateHandle
GlobalMemoryStatusEx
SetProcessShutdownParameters
VerSetConditionMask
GetConsoleCP
GetConsoleTitleW
GetConsoleDisplayMode
GetConsoleAliasExesA
DeleteTimerQueueEx
CreateEventA
GetComputerNameA
WritePrivateProfileStructW
IsBadWritePtr
GetConsoleCommandHistoryA
SetConsolePalette
CreateIoCompletionPort
FreeEnvironmentStringsA
RegisterConsoleIME

Sections

.data
Size: 4KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ