a95c3670fa64e2cd43328abf6fafcaab_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a95c3670fa64e2cd43328abf6fafcaab_JaffaCakes118
Size

22KB
MD5

a95c3670fa64e2cd43328abf6fafcaab
SHA1

04af8842e15cef84010c5159b1de98aae11f9655
SHA256

42f1f487100e81bb846f50e2c0b40413b522122f37af44d8bf92e6772035e03d
SHA512

2d935b48acc9a1e47bcba341614e03441984965a6f30d21a0ddfa36ea806e1bd6d414de7895b6ab653b401520b542c89aeb2f117899f81dcda96bd651a314649
SSDEEP

192:fN8ig9Vlz6pLDoWwPrPZmQhSmqGyuj8k1kZpzP:fNin6pLDlwPzsQZUTd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a95c3670fa64e2cd43328abf6fafcaab_JaffaCakes118

Files

a95c3670fa64e2cd43328abf6fafcaab_JaffaCakes118
.exe windows:6 windows x86 arch:x86

cd8e6a768bcbf7d8f3deeb5e51264eb0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Irvine\Project32_VS2019\Debug\Project.pdb

Imports

kernel32

ExitProcess
CloseHandle
CreateFileA
FormatMessageA
FlushConsoleInputBuffer
GetCommandLineA
GetConsoleMode
GetConsoleScreenBufferInfo
GetLastError
GetLocalTime
GetStdHandle
GetSystemTime
LocalFree
PeekConsoleInputA
ReadConsoleA
ReadConsoleInputA
ReadFile
SetConsoleCursorPosition
SetConsoleMode
SetConsoleTextAttribute
Sleep
SystemTimeToFileTime
WriteConsoleA
WriteConsoleOutputCharacterA
WriteConsoleOutputAttribute
WriteFile

user32

MessageBoxA

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 690B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ