a65ff43e8255ce96b37453fd1a8f6169_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a65ff43e8255ce96b37453fd1a8f6169_JaffaCakes118
Size

63KB
MD5

a65ff43e8255ce96b37453fd1a8f6169
SHA1

5460100e3e9acafd22baede9b8ffb9c6ef359a3b
SHA256

5ac6529b60faf55220a98daa121afc437ffb4d71ac2e40eb84b0a70d4812af2c
SHA512

51010916724a035ac36d06b302dff756bd228e5312d4ae9d318212fcdcf017e4e12d90d7a8b48a832476515345a828375b68079a799cfe3c4859f034fb374d98
SSDEEP

1536:A+hobLIenhanpku7nTVR3tBg6f50Iy+Y+gAR3oE:AJgoykoB5te6Fy+Y+PV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a65ff43e8255ce96b37453fd1a8f6169_JaffaCakes118

Files

a65ff43e8255ce96b37453fd1a8f6169_JaffaCakes118
.exe windows:4 windows x86 arch:x86

78c389eabda2cf16fbd922f02addc39e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueryMemoryResourceNotification
WriteProfileStringW
ReadConsoleA
GetStdHandle
HeapDestroy
SetConsoleNumberOfCommandsW
InitializeSListHead
ReadDirectoryChangesW
GetProcessId
VerifyConsoleIoHandle

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE