a2da72934ff4a0d5acb990ee527c513f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a2da72934ff4a0d5acb990ee527c513f_JaffaCakes118
Size

83KB
MD5

a2da72934ff4a0d5acb990ee527c513f
SHA1

2cc9ce644c4bfa7c4ea6bc4be4270ecbe60fbac4
SHA256

910b7422dc22d6a7a29f9b7dbbd933b8c038361fc5eafdc711cd6567b395ce40
SHA512

84d35c0757cc5ce3c4d9389ee3b5672cbdee2eeca4551297ec464c2e6319af8aded0dcac10a39dd5ebd47902f21163568eb622c9ec3291a528fc74ec26fab3e2
SSDEEP

1536:yPTQBXW+GRw/U9PhBoZmNyTro3ztSBD/q5d7kFDqFgRKkg2t/d6EGjMDvRQE25rs:SrWEZo4VS+eJY4VEVlyjBkMqhGKZTbbc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a2da72934ff4a0d5acb990ee527c513f_JaffaCakes118

Files

a2da72934ff4a0d5acb990ee527c513f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5727b065cda1ba88ab9d12fd06cf6715

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenEventA
ExpandEnvironmentStringsA
lstrcmpi
GetCommModemStatus
DebugSetProcessKillOnExit
SetConsoleOutputCP
GetThreadPriorityBoost
GetFileAttributesW
GetLocaleInfoW
WriteConsoleOutputW
SetHandleContext

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE