a44cc5ee5b7ca8633f2426ab6c99fda2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a44cc5ee5b7ca8633f2426ab6c99fda2_JaffaCakes118
Size

56KB
MD5

a44cc5ee5b7ca8633f2426ab6c99fda2
SHA1

b856b5a1e729271f699944bd22ed8b13244b79a1
SHA256

494b5c47601dc6cda2066422d06d83b8591a1d7f8f8f4625e81a1eda063be062
SHA512

ebcbca2e01fdafbf10c6fe99afcf4c51fd985afd1152de27fdaf4d9ec28f9fd619e73e4f4a276113725c972a204c18c7916319f1d55ad5ee9e1c666efabc1378
SSDEEP

1536:dH5rM9tdAhfnmt7/Vl4EKsm6kniG0eLH18fmw:rw9tqhfnKP4I00qGfD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a44cc5ee5b7ca8633f2426ab6c99fda2_JaffaCakes118

Files

a44cc5ee5b7ca8633f2426ab6c99fda2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

44762ef41fe85ca5a74ff5716863582b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCursorInfo
BeginUpdateResourceW
HeapQueryTagW
ScrollConsoleScreenBufferA
BackupRead
IsWow64Process
DebugSetProcessKillOnExit
WriteConsoleInputVDMW
GetVolumeNameForVolumeMountPointW
GetVolumeInformationW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE