95abfa1cb007e620efaaef898e9d74a3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

95abfa1cb007e620efaaef898e9d74a3_JaffaCakes118
Size

67KB
MD5

95abfa1cb007e620efaaef898e9d74a3
SHA1

0cd120ed2e7ea00eff7042935c7abd76be05f2fc
SHA256

44813f2e72ce0c28eb6820fd83df829647aa0672f14fc0caa091d70afcbfc855
SHA512

45fd6b8896f635fae5a7bcc9944ea649decb47770615022bdc472448ea46d2022d8bc62cf7c9d630ce3933248a6932d0c742c25baaca49c9f47f00a0c57a0b50
SSDEEP

1536:kb9iN64PeDeUXwo1Z43Vs9D8J2WE1b6pSnh+5GM+Gk3yIK:kb9iNRPeKm16lVH8gYbM+Gk3yIK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
95abfa1cb007e620efaaef898e9d74a3_JaffaCakes118

Files

95abfa1cb007e620efaaef898e9d74a3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0946b516f8d22d61ca67fb7b1265bb2b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceExW
EnumSystemLanguageGroupsW
SetConsoleCtrlHandler
GetConsoleFontSize
ReadConsoleOutputAttribute
GetTapeParameters
TlsFree
FreeEnvironmentStringsW
PulseEvent
LocalLock
SystemTimeToFileTime

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 52KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE