86703475fd571c5770bad9982d0d4f38_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

86703475fd571c5770bad9982d0d4f38_JaffaCakes118
Size

94KB
MD5

86703475fd571c5770bad9982d0d4f38
SHA1

edbc9b38379bcb196db47fe9a06532082a491f54
SHA256

8ed74acdc9a1da0394b9ea01e223fc277cb10ab6d96ef6840f05d8fb0a5f59b3
SHA512

ffe97b1609e930cc92e48a93bb1e7b771021bfb3626887370d34a4e31329d557d474e7f27f7f41b55ab6b90a08421af6cf4a28c1fc2a3f455b032280ce66d849
SSDEEP

1536:WgljlpiMJ71io6PfMvHMOZzmNG0z2086CJIZUU46XXfxc8YaEJwZK4/83ZoMOAdd:Wglj/b51ioUfMvHMkzm8a2mCJa7n5hZ6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86703475fd571c5770bad9982d0d4f38_JaffaCakes118

Files

86703475fd571c5770bad9982d0d4f38_JaffaCakes118
.exe windows:4 windows x86 arch:x86

77b8eb9646f2f0ec9266ee994199d4f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RegisterWowBaseHandlers
GetConsoleTitleA
GetCalendarInfoW
Heap32ListNext
BackupSeek
CreateIoCompletionPort
ReadConsoleInputA
SetConsoleTitleW
CreateProcessInternalW
GetCurrentActCtx
InterlockedPopEntrySList

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.krdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE