a940bc04389069409072c81f2f9f5286_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a940bc04389069409072c81f2f9f5286_JaffaCakes118
Size

68KB
MD5

a940bc04389069409072c81f2f9f5286
SHA1

e7153aebaf6e3a1225e11c76a9e474adb85edc93
SHA256

afdd6eb7f6c212d7a6298c6483713c9960f7672777d2ee00bec91dd8640566ab
SHA512

b55fca063fa073ca7da47130766f3628a6c5b46cba3990321d4eb3afbf38a798bc3a16ff798a1f716172de23fc8e05edf53a92a838c028afe39633d35ded2440
SSDEEP

1536:Oa+rKyX+YaeYMxGLlX9dkcOCFiCHh/HWpyUm/2qABzN8T0vKO:Pkb5uLucXpgyUvFNTz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a940bc04389069409072c81f2f9f5286_JaffaCakes118

Files

a940bc04389069409072c81f2f9f5286_JaffaCakes118
.exe windows:4 windows x86 arch:x86

704c73517cf2114870638e5a30e47a21

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetTimeZoneInformation
WritePrivateProfileSectionW
WritePrivateProfileStructA
VirtualQuery
WideCharToMultiByte
GetConsoleAliasesLengthA
SetTapePosition
GetPrivateProfileSectionA
GetProcAddress
ExitThread
ReadConsoleInputA
NlsConvertIntegerToString
LoadLibraryW
PrepareTape
GlobalWire
GlobalSize
IsDebuggerPresent
InterlockedIncrement
SetMessageWaitingIndicator
GetCommandLineA
ExitProcess
GetStartupInfoA

Exports

Exports

InitCvejjlnu
WriteAitkment

Sections

.text
Size: 5KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 59KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE