a3d0d5c0cb995afb80f11811e46390c2_JaffaCakes118 | Triage

Sharing

General

Target

a3d0d5c0cb995afb80f11811e46390c2_JaffaCakes118
Size

63KB
MD5

a3d0d5c0cb995afb80f11811e46390c2
SHA1

cf3ef4e045aa917999ab6d467fe25ffd22af04a0
SHA256

9c673aec3a5e24f67417668a9adf0b1813ae2c4660ac70aa907f5fb514c08e1c
SHA512

fa4e867da082b4e445edc948502d924656c9da635b43a1723f156edccb050b9f6e98dabcd3be6da8aebbd7cffa308e4a280e3b48b37662c7641ce12dbb19b642
SSDEEP

768:j2sQiuogbwiEhvDHs5smDItTRDLkj/elo0s4aunf6uXQib6jZN537DCFNa+uxUg9:K7iJM996600ZjP53CFA+u/ni0x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a3d0d5c0cb995afb80f11811e46390c2_JaffaCakes118

Files

a3d0d5c0cb995afb80f11811e46390c2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6d5eefbd4a6f0b97970657530e05cd16

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReleaseSemaphore
GetConsoleCommandHistoryA
GetCommMask
Process32Next
CopyFileExA
FatalExit
GetOverlappedResult
GetLocaleInfoA
TlsFree
GetCommandLineW
FreeLibraryAndExitThread
CreateFileMappingA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE