8469e43c595db8fbb1d4bbe2b066ddac_JaffaCakes118 | Triage

Sharing

General

Target

8469e43c595db8fbb1d4bbe2b066ddac_JaffaCakes118
Size

80KB
MD5

8469e43c595db8fbb1d4bbe2b066ddac
SHA1

374b057338525c70701baf3a9feeb8d764b5f8c1
SHA256

1d0ca235c413f4447cca19e6e430a3b27f5500d5f73c86cbe2ae439944e52814
SHA512

b85693955c8de36451b0f9050baa43e95f5040703b64e0c108376d6219144013db7514c206e1788e97c6a72dba35d9a197547bdb9557d597d326cca5549403fe
SSDEEP

1536:OUdk7Xc68nLij/ZQDlE70g/pv+KkKxLtkyW6ph/EciRVTi4z0Tp82hW8fPL:Oh8LABUlFudThdpvhKVTfY8vYL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8469e43c595db8fbb1d4bbe2b066ddac_JaffaCakes118

Files

8469e43c595db8fbb1d4bbe2b066ddac_JaffaCakes118
.exe windows:4 windows x86 arch:x86

eecf99d36fe144a2d7223c42bf39cb64

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleFont
GetCommProperties
VirtualProtectEx
RegisterWaitForSingleObjectEx
VerifyVersionInfoA
TerminateThread
ConvertFiberToThread
EraseTape
WriteTapemark
LocalFileTimeToFileTime
CmdBatNotification

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rrdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE