a4df5ef830da57afcdd2c67b8c177e93_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a4df5ef830da57afcdd2c67b8c177e93_JaffaCakes118
Size

67KB
MD5

a4df5ef830da57afcdd2c67b8c177e93
SHA1

c19d3c26a38a803ca4c663b9afc9b785c055c2df
SHA256

45d94b25307d9370b6ab240886ee1b5351c6ef79074669df6575d66a93344da1
SHA512

6c7393e1f912d95798bcf2fde9ec773866585e44c9ea1f43d3148cc68de7a3e52d0731549b6cf0989922cff52ac84812df530803dd64fadc08074aff6da5377f
SSDEEP

1536:h4Vweo3mHTEHbNeooYzO7HnJKTNjA9/yPAxWK:h4iLCkeoBODnJQNjsyPA8K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a4df5ef830da57afcdd2c67b8c177e93_JaffaCakes118

Files

a4df5ef830da57afcdd2c67b8c177e93_JaffaCakes118
.exe windows:4 windows x86 arch:x86

098ee4fa9c668675c3358c730998b9cf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetUserGeoID
FindVolumeMountPointClose
GetDefaultCommConfigW
GetConsoleCommandHistoryLengthA
FindResourceExW
LCMapStringW
ScrollConsoleScreenBufferW
EnumResourceLanguagesA
GetNamedPipeHandleStateW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 52KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE