86b8b45c6a2c7f201bf76267e5808a6b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

86b8b45c6a2c7f201bf76267e5808a6b_JaffaCakes118
Size

66KB
MD5

86b8b45c6a2c7f201bf76267e5808a6b
SHA1

69e3d244b8e5b340c59aa7ffd46b9c48e36135fe
SHA256

6e0bca756512a33081ce498b7862a955eb02140b9d7d253a9f44b610bbe67dfa
SHA512

d0472f45b0cc7efea292db816e1c396c051dc943f545eb6a2eefa617312718023dfdbe34ffbae3aca05c39ca1e5bf910ae3c19df18a1b7edf29f479a65a5ccb6
SSDEEP

1536:r3xMmANCvbwVEIAxw4R1yngIDVwFv8tV4ZV1kH3+:lMmAoDiEma1ynbRwFaVkgH3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86b8b45c6a2c7f201bf76267e5808a6b_JaffaCakes118

Files

86b8b45c6a2c7f201bf76267e5808a6b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

250c941c3e57d5ecd2ea7fbae8fb4c12

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VerifyConsoleIoHandle
GetExpandedNameA
FreeLibrary
BaseDumpAppcompatCache
CreateFileW
BaseFlushAppcompatCache
SetConsoleCtrlHandler
lstrcpyW
AddLocalAlternateComputerNameW
GetThreadPriorityBoost

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE