a3845dc27457b95d0eb3feef0ec5353c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a3845dc27457b95d0eb3feef0ec5353c_JaffaCakes118
Size

56KB
MD5

a3845dc27457b95d0eb3feef0ec5353c
SHA1

9d1c18bf9725af31bde675d7de5ee83edefed35b
SHA256

00fa16befde99d7078af416222cddec637a423d67e3dee1c5a0e8200b83c3d5f
SHA512

69b424b0bb9af266d68a8e38e2311ccf4f8717d2809216c129693663f549607aca59ea31791cd17627fb585def3f22543593a7990b21901cb1ec88759f649ea0
SSDEEP

1536:CfsDwsli/Rp3SAyzjKhcTumrQkwu4+LxJkVgb:hW/RpSPuSn1j+c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a3845dc27457b95d0eb3feef0ec5353c_JaffaCakes118

Files

a3845dc27457b95d0eb3feef0ec5353c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b67f8dcdabf4aa172050a92fd8612c58

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentDirectoryA
GetDriveTypeW
GetNamedPipeHandleStateW
UnregisterConsoleIME
GetDateFormatW
CreateToolhelp32Snapshot
WinExec
OpenMutexA
GetFirmwareEnvironmentVariableW
SetCommBreak
SetConsoleNumberOfCommandsW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE