86055d539975be9ea100302df3c0c172_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

86055d539975be9ea100302df3c0c172_JaffaCakes118
Size

56KB
MD5

86055d539975be9ea100302df3c0c172
SHA1

6f1b0a1b3910aab6272883af1dd037b28d0dc8da
SHA256

491ec22993ce1581efc63124584fcfcb960ab66053c6c71e7bac79f11cc99504
SHA512

379c0c87a1304f5756895992c7fb2d7ed73bb95965e6b97e765d7eee0a42ba5622938a698b9864673df3c93444c828060391e91faca9f2ee7fcc8900acf45367
SSDEEP

1536:CSo/s01tMoyysxyMrukHPy031zLPUCIFJyyty1ehG5UQHwSqnD:CSq7fMos85kvrhUCIx41QSM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86055d539975be9ea100302df3c0c172_JaffaCakes118

Files

86055d539975be9ea100302df3c0c172_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dfde02022dd26dddfabc38ea0e712ed8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
SetConsoleInputExeNameA
GetExitCodeProcess
UnregisterWaitEx
WriteTapemark
FindActCtxSectionStringA
IsDBCSLeadByte
IsProcessInJob
Module32FirstW
EnumLanguageGroupLocalesA
GetConsoleScreenBufferInfo

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE