847a9ff9c05d38fd1e22f99977ca07ed_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

847a9ff9c05d38fd1e22f99977ca07ed_JaffaCakes118
Size

91KB
MD5

847a9ff9c05d38fd1e22f99977ca07ed
SHA1

abd9025d85b038ce4d822b0a717b041a8739d1a8
SHA256

85bd7bb9cd329ff68728d56f635b08d2992cb0a5cb666fd4e0629ee6e533f335
SHA512

266f33ff1b0cef3d6922760ef082303aba3b307481d6477d664d9e4fe2bd56e7ea0e55d9b894eec4d13b01d9501b81623030d4b128a2674439cf07e08cfb28a0
SSDEEP

1536:uvGCyhMJjA+7L7TRpTwXsXRtutp36u/NBrp1fmPq1xOvihOZzxr6h/CkWMaU+O7C:f6jhvT/isX/utg+3rp1fms0gOZzohKkQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
847a9ff9c05d38fd1e22f99977ca07ed_JaffaCakes118

Files

847a9ff9c05d38fd1e22f99977ca07ed_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5f0aeea6204041714e471e3c20a50030

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BindIoCompletionCallback
GetNumberFormatW
GetConsoleCommandHistoryA
_hread
SetHandleContext
HeapExtend
VerLanguageNameA
GetCurrentDirectoryW
GetProfileSectionA
RegisterConsoleOS2
IsBadWritePtr

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 76KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE