886c8f7d05cc90c7c3129edb9a1855f6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

886c8f7d05cc90c7c3129edb9a1855f6_JaffaCakes118
Size

66KB
MD5

886c8f7d05cc90c7c3129edb9a1855f6
SHA1

242c3328dedcbaca2c82f46f20b49963f09fffb7
SHA256

1966a05bf7762c8c8184933ea8ce2aad033ca61e235b29e027deddafcd10396b
SHA512

7e090da6fe4ae80429c01048a7b1feb5372c57c7cfeebb848b3ae62a2013f401a91750c507b0c685d9cdea2b19665013716162498c3b06e0f4e8e9e0f38a2282
SSDEEP

1536:8Xb5fZVYcsTSOHfu5e5J7lAN3Gsk8jJKEaL5jZ5hiF2:8XNfLYLT/D7uN3lkEJKEaN95hI2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
886c8f7d05cc90c7c3129edb9a1855f6_JaffaCakes118

Files

886c8f7d05cc90c7c3129edb9a1855f6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de7ee49b7b78956a2520a5e1a886540b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

PrivMoveFileIdentityW
GetConsoleCursorInfo
SetComputerNameExA
InterlockedExchangeAdd
GetACP
ExpandEnvironmentStringsA
GetGeoInfoW
BaseCheckAppcompatCache
GetNumberFormatW
EraseTape
CreateConsoleScreenBuffer

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE