a0d6155cb99ce83a5f8913cf35e14258_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a0d6155cb99ce83a5f8913cf35e14258_JaffaCakes118
Size

188KB
MD5

a0d6155cb99ce83a5f8913cf35e14258
SHA1

1a5d8b24595eb8d9c7e06abff1169f701c3a60bc
SHA256

438e7e4132628d41372a77600dabed44a85cfd5edcc768e41ddf453e53489a64
SHA512

5ef9e3f6135fb8d0655b1cfed5f4801666ed052fe943a226eaae24fe076081d4fc70aefa7fe37fdb6654a79833fab662bc39b7d1794cd927e918605c04336261
SSDEEP

3072:wZTEOnazioKxGIPFctPtEOU+1rEteeTVmrgTJeg6Q4jWt:wN+i/oIPFctVdhVQeeRegFmQ4j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a0d6155cb99ce83a5f8913cf35e14258_JaffaCakes118

Files

a0d6155cb99ce83a5f8913cf35e14258_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b886d8f6d45ad955c088d4ed32f21ea1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalMemoryStatusEx
ClearCommBreak
FillConsoleOutputAttribute
SetCalendarInfoA
DeviceIoControl
DeviceIoControl
GetProcessShutdownParameters
GetConsoleCommandHistoryLengthW
_llseek
GetConsoleKeyboardLayoutNameA
WriteConsoleInputA
VirtualAlloc
VirtualAlloc
GetConsoleMode
GetCommandLineA
SystemTimeToFileTime
OpenFileMappingA
GetConsoleTitleA
GetProcessWorkingSetSize
ReadConsoleInputA
InterlockedExchange
ExitProcess
ReadConsoleA
HeapQueryInformation
GetVolumePathNameA
GetWindowsDirectoryA
GetCommandLineA
UpdateResourceA

ws2_32

recv

Sections

.itext
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 160KB - Virtual size: 819KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ