857b8782c1dece42dcca507d4a652d9a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

857b8782c1dece42dcca507d4a652d9a_JaffaCakes118
Size

63KB
MD5

857b8782c1dece42dcca507d4a652d9a
SHA1

04745fc839955bf130d46100668daffbdd61b57b
SHA256

53eb2d67855eccff6fefd4773da43a20a6751e652ced5a465b758e4530764d48
SHA512

e1fe8ac794d04fd8c5c814a61c7d040e8c737fbb72fb6ab6b168230972fded44775bf130806de6d3599acff8d0adb3aea02673972e0fab5f30b0a814ea2d779d
SSDEEP

1536:8rqZ6wql1F2Fo/Owga7eF5Hu7kKhfP36WYWp06:VVhS/fgaMOQifP3Tpf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
857b8782c1dece42dcca507d4a652d9a_JaffaCakes118

Files

857b8782c1dece42dcca507d4a652d9a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

49c7708541dd359855258909fe0870b0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileSectionA
GetConsoleFontInfo
GetCurrentConsoleFont
ExitProcess
AreFileApisANSI
GetNumberOfConsoleFonts
WaitForMultipleObjectsEx
CallNamedPipeW
LCMapStringA
EnumCalendarInfoExA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE