8c15a03356900bdb91e7b43013fb4eed_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8c15a03356900bdb91e7b43013fb4eed_JaffaCakes118
Size

83KB
MD5

8c15a03356900bdb91e7b43013fb4eed
SHA1

cbbe2f56b1dce259afe616d4f8544c3091039a1e
SHA256

879ddcda3df44080cf1910b1ed630f927d6ef1c91c8fe5109c4879a988b95b4e
SHA512

7810db83d53fb659e6f636f12a5a7aa566043b21055041f333df67e84a0095d793eac10096bf45b1d0f06f0a8389ca2da0d81e9f3f21dd0625e42c5f394562aa
SSDEEP

1536:zJ/RGvV/owQGT0aXkAuBnaELoI+EgA8CxvOZipjVrs2ryrd1vUQuqwcizSkX:DOVUAuFaELoI+E+MvOZiHs2quciu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c15a03356900bdb91e7b43013fb4eed_JaffaCakes118

Files

8c15a03356900bdb91e7b43013fb4eed_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3ca5bdd3ddca7a526e5e746b75239378

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteConsoleW
SetConsoleCursorPosition
GetComputerNameExW
VirtualFree
GlobalDeleteAtom
OutputDebugStringA
DecodePointer
OpenConsoleW
GetProcessShutdownParameters
FindFirstVolumeA
GetFullPathNameW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE