895687014844cb22959b11bdd31a68d3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

895687014844cb22959b11bdd31a68d3_JaffaCakes118
Size

54KB
MD5

895687014844cb22959b11bdd31a68d3
SHA1

85f0ece7227b76d5512dfe0b520ea3e8bd7709f1
SHA256

83cff0511dd746a27bfdaf424477abce4323781d445293134ab35d17d71c0964
SHA512

23dd8660cb6f28a8e171a511693b34c2f564ad6a9987c62954896c0f06ccc63a82f0bebdce64b35c9801f98e369ee43f97800a7cddad4e8a9058b3c3923a7ce8
SSDEEP

1536:JwQazhCOHl/jcXWVtY+URBtrZrQGYy2+8UCg:vGCelKWXetrhQGH8h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
895687014844cb22959b11bdd31a68d3_JaffaCakes118

Files

895687014844cb22959b11bdd31a68d3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

caf9c46acac142397f0d9781d5652ef7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenConsoleW
SetupComm
IsSystemResumeAutomatic
FlushConsoleInputBuffer
lstrcpyW
RegisterConsoleOS2
CreateFileMappingA
GetExitCodeProcess
GlobalFree
SetConsoleMaximumWindowSize
SetVDMCurrentDirectories
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.text
Size: 5KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 46KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE