aaed797da85c3fc1df6c516685803783_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aaed797da85c3fc1df6c516685803783_JaffaCakes118
Size

86KB
MD5

aaed797da85c3fc1df6c516685803783
SHA1

a0d2bd9f798669a3a4de970d7423c3c265457dea
SHA256

fac559ee0f89b10725dd01f359fd423228a07b45b964c7859525e2fe25d36cf8
SHA512

31d5e0f0f8a8672bcb3e9e255e1f0693f8b0c447d16b65da676ac44f91f33191fd46ef31a65de4edc70ba7c8d4b26f3e10bd9792f4e50aa8a218047a7b8db2e5
SSDEEP

1536:U+993uASMbktKdFVIsXtM7Sr3RIASkkfvotc7VIz4s0IguE32W+bY8Nf1BnJNP7b:U+993uASM4tKdFVIsS+rmffvXG0sltyi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aaed797da85c3fc1df6c516685803783_JaffaCakes118

Files

aaed797da85c3fc1df6c516685803783_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e18f005cb53c6c129d5c0e677ba038e7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStringTypeExA
TzSpecificLocalTimeToSystemTime
GetConsoleCommandHistoryA
WaitForSingleObjectEx
Heap32ListNext
Thread32Next
SetEnvironmentVariableW
ReplaceFile
QueryDosDeviceW
HeapSummary

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xrdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE