8c31f49af6c645ea58b8fc4dff62be27_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8c31f49af6c645ea58b8fc4dff62be27_JaffaCakes118
Size

63KB
MD5

8c31f49af6c645ea58b8fc4dff62be27
SHA1

f1f298985fd36ea97b8185996558a33f8949f539
SHA256

9fc5c53c372599d82ad363de51bfbbd61780d760de383c3da7b411aee20d0175
SHA512

1813b43f2b55c6a02e07c8471d255b358330076ac8a62f3e859d1128bebe8a0c2e00729a86b672269b5a199dbd146492659c29c655ec4865cc69796d2db018f0
SSDEEP

1536:q5MK6eOACjnSyM3BWfMdPy0ShPZnNlZ2JBobJBBRk10AUXKcg:UMrdAenPM3BzPynhPZnLZ2JBoNDRvg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c31f49af6c645ea58b8fc4dff62be27_JaffaCakes118

Files

8c31f49af6c645ea58b8fc4dff62be27_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd7bd17fab183fcea03bede426c92b74

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
GetDriveTypeW
AddConsoleAliasW
CloseConsoleHandle
SetConsoleTitleW
Thread32Next
SetLocalTime
GetLogicalDrives
CreateProcessA
TrimVirtualBuffer
ReadConsoleInputA
WriteProcessMemory

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE