95bb054748655793ecab0775f5fddfbf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

95bb054748655793ecab0775f5fddfbf_JaffaCakes118
Size

164KB
MD5

95bb054748655793ecab0775f5fddfbf
SHA1

8d2dba8eef95502742de732bd907540027b17d46
SHA256

5257037fa05f77f811e6ed0cd86089dae95080f6d81d7f50e6a016a7d24bec62
SHA512

8727b8da0a9a41bad9eedefef0edbcc86f64f522b28b4378db64fb986907206f659093439010331a29ef44d99087caa12535493989b35499238bc77b6c83b969
SSDEEP

1536:FEJMDapndfcdURnQD5vfBzQiaACwi8U1iwib99Tl/l032XDMVIOyFnToIfG+OHTL:MF25vfnCwi91cdI2UytTBfG+OHT80

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
95bb054748655793ecab0775f5fddfbf_JaffaCakes118

Files

95bb054748655793ecab0775f5fddfbf_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

consoleCancelTask
consoleCloseHandle
consoleConnectRemoteComputer
consoleCreateFolder
consoleDelete
consoleDownloadFile
consoleEndCMD
consoleExitInstance
consoleExpandFolder
consoleGetDriveInfo
consoleGetRemoteComputerList
consoleGetResult_ExpandFolder
consoleGetResult_GetDriveInfo
consoleGetResult_LoginCentralServer
consoleGetResult_ReceiveEchoCMD
consoleGetResult_ShowFileList
consoleInitInstance
consoleInstallCallback
consoleLaunch
consoleLoginCentralServer
consolePaste
consoleReleaseMemory
consoleRename
consoleSendCommandCMD
consoleSetLocalAddress
consoleSetSupportMode
consoleShowFileList
consoleStartCMD
consoleUninstall
consoleUploadFile

Sections

.text
Size: 104KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ