964c0c8c9fb93366889b7c8283f15d7a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

964c0c8c9fb93366889b7c8283f15d7a_JaffaCakes118
Size

56KB
MD5

964c0c8c9fb93366889b7c8283f15d7a
SHA1

87844d6e9930841f9964d955f191d0bdd5b1d769
SHA256

0dbcf69af565bc52bc56e5181fa6bc909dd4dd5372f347495e2f04983968239b
SHA512

abeeb1fa0ec218acb8a13c91c8a3031ab9ddf1e7f5cade0034e4f7af93b9017a2020ca5c9ed50fd338db90ffd7f8b9c472ef50920f1975c4885c8196adc1715b
SSDEEP

1536:UfSEB9EThE+Udgq8QMT22l0c57zVfbBaMsuvYrYLn:UfSEBGTmTA2U0cRP3vYrC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
964c0c8c9fb93366889b7c8283f15d7a_JaffaCakes118

Files

964c0c8c9fb93366889b7c8283f15d7a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ffd30670c851d756f1ebaa5f95482849

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCommandHistoryA
ReadConsoleW
TlsFree
SetThreadIdealProcessor
GetOEMCP
MoveFileWithProgressA
SetConsoleCP
GetHandleContext
SetFileAttributesA
FindFirstVolumeW
CreateMutexA
FatalAppExitA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE