850c42bb3fd28650126d68ad9c96a48f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

850c42bb3fd28650126d68ad9c96a48f_JaffaCakes118
Size

71KB
MD5

850c42bb3fd28650126d68ad9c96a48f
SHA1

ca0fb5f444c6146522143560d1df4e01dc681127
SHA256

32303335163e4953891e12b2264d2e1a120dee6dcaf6ebf8487941fd1245b7a4
SHA512

e03b90059f21c85dc764b4c41f5ee1581c0b936c53776516aa6db61018d1f50e57cdb3882200b879a3366b136460b505df8a331bda75349447dc61666ed30594
SSDEEP

1536:EBP6E1mY99lBYq5pgsqjaLGc2hCj6SG8KC0RgGqk0KzkAb:4Ph1mylVhLGlyGwkgnOkA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
850c42bb3fd28650126d68ad9c96a48f_JaffaCakes118

Files

850c42bb3fd28650126d68ad9c96a48f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d41b9160df4b6a71a3ad25d9b6ff84f8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCompressedFileSizeW
DeactivateActCtx
SetConsoleCursorInfo
ConnectNamedPipe
MoveFileW
HeapValidate
GetConsoleCommandHistoryA
SetTimeZoneInformation
Process32First
SetFileAttributesA
IsWow64Process

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE