830ec287a52c87e473aac0ad4082e8c3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

830ec287a52c87e473aac0ad4082e8c3_JaffaCakes118
Size

61KB
MD5

830ec287a52c87e473aac0ad4082e8c3
SHA1

4d1d7b781c624cbd0db02ba0a907cd6ef70bee20
SHA256

62bb94f9ff5dfc67e02be9d1f48cb380520a5c5ae84d2e7ee243e4cf92e4cbae
SHA512

49464c925961b1cbccd5386ae9bb1752637d217481b4d734d9affd0d5447dc891c398330f71cafa432091eb41dcedfdce91c6d97a0b2a0bc6ed8c1cd1e8b556b
SSDEEP

1536:V8O3Ac+GsizAaYodRxEliuk42io47urug+xYr+:V8EADGsi8AxEliuk4larug9r+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
830ec287a52c87e473aac0ad4082e8c3_JaffaCakes118

Files

830ec287a52c87e473aac0ad4082e8c3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4c662121ea61666120a4c51f278239ab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
UnlockFileEx
SetClientTimeZoneInformation
GetSystemWow64DirectoryW
GetConsoleCommandHistoryW
GetSystemWindowsDirectoryA
GetLargestConsoleWindowSize
GetConsoleFontSize
VirtualUnlock
GetCurrentDirectoryA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE