86994f3c154e83068c6bed4ca8711052_JaffaCakes118 | Triage

Sharing

General

Target

86994f3c154e83068c6bed4ca8711052_JaffaCakes118
Size

66KB
MD5

86994f3c154e83068c6bed4ca8711052
SHA1

0c11a385bee290dd598d9bba536a65e6d8d792c6
SHA256

8f10011ceab6b692df120211a72cec8ab0a8d96580eb8ed9905e70fc5387f9f5
SHA512

56b2f87ff3b3549a36b6b8be25533411d00abfbfcd71de21d773339316d50d052b2d9e430fcafa4817f8926f03a562e5695874a704dbe83d2b8b09409408ede5
SSDEEP

1536:HjUV66RMyjx9iICS5mv+TUqNtoNy3n9/VQQU2ghHbM/VsNN3Y8:HuxMS75mvcUqNl39/PYG/O31

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86994f3c154e83068c6bed4ca8711052_JaffaCakes118

Files

86994f3c154e83068c6bed4ca8711052_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de4876627b2784e089cc8b3f3b245877

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
FindFirstVolumeW
SetCommBreak
lstrlen
SetConsoleNumberOfCommandsW
GetFileInformationByHandle
GlobalUnWire
GetStartupInfoW
WritePrivateProfileStringA
GlobalFlags
FatalAppExitA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE