a419b49c30d0cfc7b7a4f99682e883a9_JaffaCakes118 | Triage

Sharing

General

Target

a419b49c30d0cfc7b7a4f99682e883a9_JaffaCakes118
Size

112KB
MD5

a419b49c30d0cfc7b7a4f99682e883a9
SHA1

25826eb857edc3de4cc08669242e7d131f4f7b4a
SHA256

2149662413666a6836455ce7d65de72b4cc9994ac3f76735e5fd612d81f18ca5
SHA512

a5b2cc74cc49e577d910ebcd75b68e91383cdd3eef41e119a3187861515db0624db97e7c49fa7ef0f76903ae246bd149b824a2e1ae29e038fe4336734fedbad0
SSDEEP

1536:olMfxilpxSf6lcO/WwdVVy4F5qu/y+H2xo0B5XJMvKNzplaZOZhAiiqgf:o+iFgw1y5uhJ0B5X1TsZOZZXgf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a419b49c30d0cfc7b7a4f99682e883a9_JaffaCakes118

Files

a419b49c30d0cfc7b7a4f99682e883a9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d14642921f51f1d3fde73ba67a634130

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FillConsoleOutputCharacterW
GetThreadTimes
FlushConsoleInputBuffer
FindAtomA
GetOEMCP
SetConsoleNumberOfCommandsA
GetLongPathNameA
CancelDeviceWakeupRequest
WaitForSingleObject
QueryPerformanceCounter
CallNamedPipeA
SetCommTimeouts
SetConsoleLocalEUDC
GetVolumeNameForVolumeMountPointW
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.code
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE