956042d1dafe921b49377cc2ffe7b71b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

956042d1dafe921b49377cc2ffe7b71b_JaffaCakes118
Size

66KB
MD5

956042d1dafe921b49377cc2ffe7b71b
SHA1

150db20382116aa09d56337884ff5bdaaf433442
SHA256

2df5230431f2ca228f5b53e512a932b1eaf2598006107b195ed3f94f5471e7ec
SHA512

c5ed7474946bfca16e8d1e4fdfa12cc4f3cbf93d8310ae4c314ece5c796abd826779211ab13723b6be246a0574421c2ca8b517e979d7ff1593e80e6b6892622c
SSDEEP

1536:MqVJV8R8Gus+mM6L0oHGEEYbP8UHcgbdB:ZBVGLMloHqYbP8UH15

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
956042d1dafe921b49377cc2ffe7b71b_JaffaCakes118

Files

956042d1dafe921b49377cc2ffe7b71b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dbedf9335bf660bc0121641f1596bc37

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetNumberOfConsoleInputEvents
SetCurrentDirectoryA
FlushViewOfFile
GetFileTime
RegisterConsoleIME
EscapeCommFunction
QueryMemoryResourceNotification
GetDateFormatW
CreateRemoteThread
GenerateConsoleCtrlEvent

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE