a4c5eeff2dd2e374d87307e4dd515d1c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a4c5eeff2dd2e374d87307e4dd515d1c_JaffaCakes118
Size

66KB
MD5

a4c5eeff2dd2e374d87307e4dd515d1c
SHA1

0929731fe2387f01211d3e7d3b6a591f82b52a34
SHA256

933266ea367ec1daf74f655ccaf2fd1b3539938402e6e40b7b52f5c66817ad1c
SHA512

9347e94b6dbd78a733185846e88092d43337e3f19096764cd1951dd329134ef7d62a97a097ade035d5c6ac7cf768b6b775b76c3a4630ab92d65a460def7f78e5
SSDEEP

1536:dhw0PP0GcO+AMDEUxHBolnQp/p34IMh5lu0m:dTUGcuMDElEIIMcN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a4c5eeff2dd2e374d87307e4dd515d1c_JaffaCakes118

Files

a4c5eeff2dd2e374d87307e4dd515d1c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

971ea3591c3612763213c088cbce6987

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetBinaryTypeW
GetProcessTimes
GetFileType
VDMConsoleOperation
BuildCommDCBA
FindFirstChangeNotificationW
GetSystemTime
CopyLZFile
AllocateUserPhysicalPages
GetConsoleAliasesLengthW
CopyLZFile

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE