a78a10ca2a8951c43e353a561d6e73f3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a78a10ca2a8951c43e353a561d6e73f3_JaffaCakes118
Size

62KB
MD5

a78a10ca2a8951c43e353a561d6e73f3
SHA1

348f017818b4ff07f897d7e10ddc50c9f893c884
SHA256

dfce01f7723a95e01ac8854361c515956c82c5cd91a6fe9ecbc7ae21930b391f
SHA512

236da45cbf54c8d188ba89d275487539513f2a64d89415b18294fdb039191250a4a0d987323167c60acc7924208a08c29961783fe3bea4dd371e8b20fde7ab23
SSDEEP

1536:j+gSGnq2OAQwHowLKQQd1mAcwR0pMUlyfb9Uil1edKq:zSCzQ/wLHAc0aMUlIJUdKq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a78a10ca2a8951c43e353a561d6e73f3_JaffaCakes118

Files

a78a10ca2a8951c43e353a561d6e73f3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

84642d22402a50f25d67f9a89cb8ec65

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyA
GetConsoleInputWaitHandle
CloseConsoleHandle
GetVersion
DefineDosDeviceA
VirtualAllocEx
CreateNamedPipeW
IsDBCSLeadByte
GetThreadIOPendingFlag
BaseCleanupAppcompatCacheSupport
SetFileValidData

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE