87e713529933957794b190159e4c3df6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

87e713529933957794b190159e4c3df6_JaffaCakes118
Size

109KB
MD5

87e713529933957794b190159e4c3df6
SHA1

1509e06958db63cfed607ff0f6feba3c98af31a9
SHA256

f64a0ca67589fa0a19ae53c0effa6fc270c8fc63cd34937949194123c68e4f51
SHA512

c1ae92a4b867258f5185064526c9d2adf0082f7c13cc4af8fba022b8cf873711372889470fe147d8fe44f233ec1b3eb89d34326d37dcb04c3d88cba36797bb23
SSDEEP

3072:7hdczUR/t5Spj3gh9zisWabeCfpeeY2D5GcunQOs5X:7vCUbIQhJiJabeCbY21GcuQOyX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87e713529933957794b190159e4c3df6_JaffaCakes118

Files

87e713529933957794b190159e4c3df6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d76e5cb9e7905f69948515cadd7caa76

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetShortPathNameW
GetConsoleAliasExesLengthA
HeapCompact
LCMapStringA
SetFileShortNameW
GetVolumePathNamesForVolumeNameA
FatalAppExitW
LocalCompact
ReadConsoleOutputCharacterA
ReadConsoleOutputCharacterA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 85KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE