8d7fe544f049c5a6bb22fcf041d3f1fe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8d7fe544f049c5a6bb22fcf041d3f1fe_JaffaCakes118
Size

56KB
MD5

8d7fe544f049c5a6bb22fcf041d3f1fe
SHA1

0e6ebdfba6c6accd9e9d1e9f308a07aec874a69f
SHA256

6d8c161d1182c7817e12febcb601d4cd80695378a8250ebaadc73dd41b5d4f92
SHA512

b6ba4887ef7882938c77b2d29b348b8a85409ea9ee0cedfd905e36575f004a8b3230648b7a1e65a40fcdcf33b0ae370d6122e34e95f2ee2f5542411861cdcedf
SSDEEP

1536:euHW8WeAVIvXSp8PI3AwcdKwZrunOChtAlzwB2m:4WJucdKwEnOplc9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d7fe544f049c5a6bb22fcf041d3f1fe_JaffaCakes118

Files

8d7fe544f049c5a6bb22fcf041d3f1fe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7e337ae657768fdd21a9a9b7da56003f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FlushConsoleInputBuffer
LZInit
GetConsoleCommandHistoryLengthA
OpenProcess
FlushViewOfFile
CreateProcessW
GetCurrentActCtx
GetTimeFormatA
DeleteAtom
SetLastConsoleEventActive
FindResourceExW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE