8678aac9844b040b217a15e5fe1871db_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8678aac9844b040b217a15e5fe1871db_JaffaCakes118
Size

109KB
MD5

8678aac9844b040b217a15e5fe1871db
SHA1

96c6bb56aacfc590348b25db6c7e39dd03f97220
SHA256

26bc1d1adf6033414d96790857b2008c7a3647dfef1bf5e8ff9c027c2ed3158b
SHA512

8fef37ca032cc7b9ad9685f3dfc7b836d7a8225adff3b86cfe0a058b5a6f746bf28111a520bc225c09bd2448a6f29af0925226ca652af52e13d0b7488c3e96e7
SSDEEP

3072:IIs2F3WmgNEBnxF46ot8fFiMMAsnatCFqKcgySX:jsmt3FnAlnat/SX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8678aac9844b040b217a15e5fe1871db_JaffaCakes118

Files

8678aac9844b040b217a15e5fe1871db_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f05c359616347a3965098b7c49342aa5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitNamedPipeW
WriteConsoleInputVDMW
FatalAppExitW
GetFileAttributesExA
PeekConsoleInputA
SetVolumeMountPointA
UTRegister
Thread32Next
ReadDirectoryChangesW
AllocConsole
GetConsoleAliasA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 85KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE