86f310622289591d995b8bc29fc11cc5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

86f310622289591d995b8bc29fc11cc5_JaffaCakes118
Size

182KB
MD5

86f310622289591d995b8bc29fc11cc5
SHA1

2d28044153fd8bced0fe0a854d85cecbac0f41e5
SHA256

c3dbdbcd679919a7f18be171821f83b832a8d758c2723ef14fbd41f05657068f
SHA512

f79f6b2635416fe596e81d6d5b74a68cb3cf8c6ef534a790bf724802a63840afc88ebe3ed23cdfcbd46f4f34e5d2201a367d54c9846fadaa9f7c75c81485b132
SSDEEP

3072:u+4tCzEfdh6qLwl57JKyqsQJh6doHnSwmqCfx1L5QJTPyFFuu4ZX:QCgdhPLwlRar6doHSjbfbGJaFMu4Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86f310622289591d995b8bc29fc11cc5_JaffaCakes118

Files

86f310622289591d995b8bc29fc11cc5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aee3f245d3bae3c3887dea0a8f8f4859

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BuildCommDCBA
EnumResourceNamesA
GetConsoleCommandHistoryLengthA
GetShortPathNameW
PrepareTape
GetNumberOfConsoleInputEvents
Thread32Next
DeleteFileW
VDMOperationStarted
SetLocalTime
SetMessageWaitingIndicator
IsBadCodePtr
BindIoCompletionCallback
GetCommandLineA
ExitProcess
GetStartupInfoA

user32

LoadAcceleratorsW
DialogBoxIndirectParamW
CreateMenu
PostThreadMessageW
FindWindowExW
SetSystemCursor
SetLayeredWindowAttributes
OemToCharBuffW
GetAltTabInfo
DeferWindowPos
GetInputState
DefWindowProcW

Sections

CODE
Size: 5KB - Virtual size: 810KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 172KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE