ad2d3e4c5c1d59b7e6a5bbaf54da43f0_JaffaCakes118 | Triage

Sharing

General

Target

ad2d3e4c5c1d59b7e6a5bbaf54da43f0_JaffaCakes118
Size

48KB
MD5

ad2d3e4c5c1d59b7e6a5bbaf54da43f0
SHA1

0ec271bf5c45ceda7439028a593e6ec629f05610
SHA256

4e52a516129ed7afc9eaa3d0c7c7a06e05f14ad53d7f32e29396a0f0ae14fbcd
SHA512

a8962b95b4015034cfde9366c7e0e54f8d2c40e500595a5cce431bc65ec545e6bb49fa208a627ad007ac91e5ced0b9bd8ba02246bfa0c487615e190a0380899b
SSDEEP

1536:bUSacZktJuwR2qbD+oaaJzxOKYPz28oBc:bU4SZR22D9aKaPho

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad2d3e4c5c1d59b7e6a5bbaf54da43f0_JaffaCakes118

Files

ad2d3e4c5c1d59b7e6a5bbaf54da43f0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

66da21536e6d31a7808cbea57474e590

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VerLanguageNameA
PrivCopyFileExW
EnumResourceNamesA
DisconnectNamedPipe
GetNumberOfConsoleInputEvents
GenerateConsoleCtrlEvent
BuildCommDCBAndTimeoutsA
SetConsoleWindowInfo
OpenThread
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.code
Size: 4KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 41KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ