894da2961af0932660c6dd745a4fc03c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

894da2961af0932660c6dd745a4fc03c_JaffaCakes118
Size

31KB
MD5

894da2961af0932660c6dd745a4fc03c
SHA1

bd513c11dcb545a7d195a7ed434068046cfedcef
SHA256

e44c82c903243cca7757cdcf873a58c4c12c5865e1a35ff7afcf2ccdcb5482d2
SHA512

6394428eb9c29661a370fab45bd63c7263b164d69c047cec19357d0e3c692c32c031680d521051b9c00a6d895fa6d9694f32f52d66cb3626ab64f8ac9ad6509f
SSDEEP

768:/l0Rgi9/ZBWMFvmbtqAltL74Zdiufbvr:9099/vNJm3tP4Z0abvr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
894da2961af0932660c6dd745a4fc03c_JaffaCakes118

Files

894da2961af0932660c6dd745a4fc03c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cbdfed1db12b0137e09fc241da427d86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MoveFileWithProgressA
EnumDateFormatsExA
OpenFileMappingA
GetVDMCurrentDirectories
IsBadStringPtrA
CreateHardLinkA
FindNextVolumeW
GetConsoleAliasExesW
GetConsoleScreenBufferInfo
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.code
Size: 4KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ