85fc49426ae5df601a621e7752e9c68b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85fc49426ae5df601a621e7752e9c68b_JaffaCakes118
Size

63KB
MD5

85fc49426ae5df601a621e7752e9c68b
SHA1

f01448755873b0861b10170cab9c7616c6aa1e4b
SHA256

b27fcf02479d3a1ffbec0edcd830d42806197757aa60029cd588258e4fd702de
SHA512

898fbd16c0330e43fb74c40d9db98a614756f3d721acc04ca793f1da462948049e593a83f01af49347279c71e3e8526206438effe3764017c880a7f9fd051a24
SSDEEP

1536:gqSGfUaF/3kkAGb81O/Lz3KMD+HLqDwW0:ZSGVB39FbYOXaMD+2DwZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85fc49426ae5df601a621e7752e9c68b_JaffaCakes118

Files

85fc49426ae5df601a621e7752e9c68b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

41a120ca0e08691726ca2b64abb46e69

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileIntW
Process32FirstW
Heap32Next
lstrlenA
GetProcessTimes
LoadLibraryA
AllocateUserPhysicalPages
IsSystemResumeAutomatic
ReadConsoleOutputW
WaitNamedPipeA
SleepEx
GetProfileStringW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE