acfb6aca5e82b15e5d306c5c355d1dd5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

acfb6aca5e82b15e5d306c5c355d1dd5_JaffaCakes118
Size

158KB
MD5

acfb6aca5e82b15e5d306c5c355d1dd5
SHA1

6c7a54d10a3e65dd1ed6f07e4969a4ae94029476
SHA256

9d0de95cc87219ffdb4ecee78fb134be0a3debbdfbabc40a236a051823c5fc32
SHA512

41ed49b3abbcda5913eaa6816e28c2bc580c8e2133d071d61a8bde08a4d7220398325010fc0293155f33dbbda2f8e4cbc64da36f08b7e08ec03826b520f2934c
SSDEEP

3072:lQifExwINaVm6ECA/NsIfF7jr5CcWlNpmLy5fwGweaUlodmDIrVZ70:lQictN2mvSI9/r5tWlNpmLy1wGVaUl5u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
acfb6aca5e82b15e5d306c5c355d1dd5_JaffaCakes118

Files

acfb6aca5e82b15e5d306c5c355d1dd5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

11740f7ddb3d127d77617b8cf7fb9e36

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProfileSectionA
FindCloseChangeNotification
GetProcAddress
LoadLibraryExA
GetConsoleCursorMode

Sections

.text
Size: 155KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 214B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 72B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 940B

IMAGE_SCN_MEM_READ