ace3d6a1d8a1f6a40577e8e42f2cd775_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ace3d6a1d8a1f6a40577e8e42f2cd775_JaffaCakes118
Size

63KB
MD5

ace3d6a1d8a1f6a40577e8e42f2cd775
SHA1

358104d35cc077a4f560e6f77dcc2bc7a09b35b7
SHA256

063f042ea4b6998af21ff67a3bc9a8fe73b58afffea629136f19585c63b54942
SHA512

abd6280a2b15622592138fe0e3363f2a38a8e4b4445ade1ec0feb4f342d87ab53733eb5c274a7f35a8cf1c23bc80f915a3a051cd1f5635975ec9acaa348cf1c3
SSDEEP

1536:asZzEnJwu40TjQHz+yZRKlCpggWrLP3Aq:tZzGW/0TjQBfaLP3Aq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ace3d6a1d8a1f6a40577e8e42f2cd775_JaffaCakes118

Files

ace3d6a1d8a1f6a40577e8e42f2cd775_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c3f73123c72610659953e10f8b41a023

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DuplicateConsoleHandle
GetVolumePathNameA
MoveFileExA
Module32NextW
Thread32Next
LZStart
GetUserDefaultLCID
GetConsoleAliasExesLengthW
GetBinaryType
CreateActCtxA
GetFileTime
BackupWrite

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE