84ac48ebfee76572234602cf1dc7bbc2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

84ac48ebfee76572234602cf1dc7bbc2_JaffaCakes118
Size

56KB
MD5

84ac48ebfee76572234602cf1dc7bbc2
SHA1

387b2e97f34930ed7e9a8a485eeec9e052d9b073
SHA256

0e573aa8a3ec1614b1c5cdc176000a502bb0971fd2c5d8d3924edc94f9992bfc
SHA512

be37a84a0b82f42946f9c1420bf7ec72c242c869f90a2fa82ddbed9c0817dd0ecc958070a284b6ca88256273a63ae80b0f390e639df0f18b1b98a21f5c7c0f2b
SSDEEP

1536:S2SHUNZVsZaUVkWLFJdY+yC72r/1sePFfvTcx9aOao:1ZVsZj+oDgsu3TcS8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
84ac48ebfee76572234602cf1dc7bbc2_JaffaCakes118

Files

84ac48ebfee76572234602cf1dc7bbc2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5277a31605d1588ec071271e4a5cd394

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FillConsoleOutputCharacterW
MapUserPhysicalPagesScatter
GlobalGetAtomNameW
GetNamedPipeHandleStateW
GetExpandedNameW
QueryDosDeviceA
DeactivateActCtx
FileTimeToSystemTime
SetMessageWaitingIndicator

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE