ae2a549bfd14322a72e27ab86db480e9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ae2a549bfd14322a72e27ab86db480e9_JaffaCakes118
Size

40KB
MD5

ae2a549bfd14322a72e27ab86db480e9
SHA1

f9cd73ba90ffdff7a32a9f90194151ba73c13489
SHA256

39824507b25d1495299ca07ac564ba96c3c1ec30eca4ee725e160c116d03f655
SHA512

231c4244ef318a19d85b47fbf866d4e91d9883b7bf28d6d8725063212ef8cf71237c78d1b717ba74e5f7ca9a60195cb6cd8cf882441d4bd19991d0fd5db8906f
SSDEEP

768:8QqCERp1ZUYWwR0c9JRiPQama8++wSxcrlZTBeWAqozNBXsHQscZiJt5VHYQKaxw:lu3sbtsKD+qoBhsHIZiJjV4P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ae2a549bfd14322a72e27ab86db480e9_JaffaCakes118

Files

ae2a549bfd14322a72e27ab86db480e9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9e1fe3077e4635a896cd50ec08c18408

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ConsoleMenuControl
FileTimeToLocalFileTime
WideCharToMultiByte
GetWindowsDirectoryW
WriteProcessMemory
AddAtomA
GlobalFix
GetConsoleCursorInfo
SetConsoleCtrlHandler
SetProcessWorkingSetSize

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE