8727e592ea4e1e2294da05cd250d6e50_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8727e592ea4e1e2294da05cd250d6e50_JaffaCakes118
Size

56KB
MD5

8727e592ea4e1e2294da05cd250d6e50
SHA1

8ff521a52feac1edb456c1b0a8872183fb16e171
SHA256

70ba774d0d44833b6d02374ece1b6adc60c7abbf799c4c919b299c041303b8a7
SHA512

a3af5b304db33d712cd6f796d344865c8d82687b30b54cdb8ab921c99a0978b650dbaa13ef450b0ae8d4f4f38bed0e7a1678c1d5ddf8ebf45f638cc2ebd2d10b
SSDEEP

1536:Q2v1Xlt38kNbe3c/HITkv0cKjEs+t26+/2mQwinmoK:QuV/HIovlkEsa2YmoK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8727e592ea4e1e2294da05cd250d6e50_JaffaCakes118

Files

8727e592ea4e1e2294da05cd250d6e50_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2b5f43b008a155b6730b61b5bdf11593

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateProcessW
PeekConsoleInputW
GetCommMask
WTSGetActiveConsoleSessionId
GetSystemWindowsDirectoryW
UnregisterWait
ExpandEnvironmentStringsA
WriteTapemark
Process32First
HeapAlloc

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE