a00401d4e31184fcac6453f216fd79a6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a00401d4e31184fcac6453f216fd79a6_JaffaCakes118
Size

31KB
MD5

a00401d4e31184fcac6453f216fd79a6
SHA1

e5ffc64cbe0e0c51a3b4766dddd20480deaa82aa
SHA256

40df4dea8bca985d6046a91641fa96bb0cd43ff361cf608d094a09e7746094d6
SHA512

92f0693595477ab6eba7a6a0f5a6e959c453268ff6277789044cd5760cbb74822fbe0b5c9284aee7aed52e833c0333d6a80bb5e220296449621879883246d6c8
SSDEEP

768:dsAkIoEYpoRiRMwHfwrEwh1PwZKkNZ4PZM9zfCPigv9Om:4JyEwh9eKk7iM9Taigv9X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a00401d4e31184fcac6453f216fd79a6_JaffaCakes118

Files

a00401d4e31184fcac6453f216fd79a6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6ec763e67837a32909dea467d6ecec5e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
SetProcessPriorityBoost
SetConsoleTitleW
ScrollConsoleScreenBufferW
OpenWaitableTimerA
DeleteFileA
CloseConsoleHandle
FreeEnvironmentStringsW
GetFileAttributesA
GetFileSize
SetConsoleCursorPosition
RegisterWaitForInputIdle
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.text
Size: 4KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ