948dec88cd17195f40c9fe7e85e38b2b_JaffaCakes118 | Triage

Sharing

General

Target

948dec88cd17195f40c9fe7e85e38b2b_JaffaCakes118
Size

66KB
MD5

948dec88cd17195f40c9fe7e85e38b2b
SHA1

dc3deff9d4a925c8f19b9def3e9308b00eb0dee9
SHA256

2c835cf8ab2702b039f5dec54db536d9c57c3e53b6fff5fe20dab5049375ffdd
SHA512

b0d262ae65482c43eeda2580c9a827a3a849c8ce8cee015636d3b551aa37e73263b208771e2e22f9d6b839032b40ea693d3d524d4edc78cde13a9ed9a0d8847b
SSDEEP

1536:BHdnnlMre/ZaU5stu3oqHjR4ugjFoQaRpX7d47w7/LPK6:flM+HaSpX7dow7/G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
948dec88cd17195f40c9fe7e85e38b2b_JaffaCakes118

Files

948dec88cd17195f40c9fe7e85e38b2b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

77e77c272140d7d82bec43c60611c00a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReleaseSemaphore
CheckNameLegalDOS8Dot3A
OpenMutexA
GetTempFileNameA
BuildCommDCBW
GetCommandLineW
WriteConsoleOutputCharacterA
ReadConsoleOutputW
CreateHardLinkA
SetFirmwareEnvironmentVariableA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE