afd6696712583456951c0ad6655c6414_JaffaCakes118 | Triage

Sharing

General

Target

afd6696712583456951c0ad6655c6414_JaffaCakes118
Size

83KB
MD5

afd6696712583456951c0ad6655c6414
SHA1

fa7cd2fa2b5bf3abf91ecb3415e6f293fa928c0d
SHA256

713662241f207216afc0232d1654bf2fcfdbb691017ee01df70366fdae4d8d0b
SHA512

1ddb9b5f281da49808a2269be9f3ceb8c22ee494621a28b5cee57888872aa23738563ed83fc2809201f22952c59c26cb0e0c81aef6ba25f45a19fd5cfa16fdb1
SSDEEP

1536:QvjmLpj01hjHqSQTXbi23XUna9/6Sy9nTrjEErxTWDTMqhGKYIZTET8bDQ:KmVj0nqz93XUK6SyhjBkMqhGKZTbbc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
afd6696712583456951c0ad6655c6414_JaffaCakes118

Files

afd6696712583456951c0ad6655c6414_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b89b54b8e489dd4d0fb451108b4a2450

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcessId
RegisterConsoleVDM
UnregisterWaitEx
GetTapePosition
GetACP
ReplaceFileW
PurgeComm
AddVectoredExceptionHandler
EnumSystemCodePagesW
WriteProfileStringA
SetThreadUILanguage

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE