b16c4c53137d7d37d36674a69b7a8db7_JaffaCakes118 | Triage

Sharing

General

Target

b16c4c53137d7d37d36674a69b7a8db7_JaffaCakes118
Size

83KB
MD5

b16c4c53137d7d37d36674a69b7a8db7
SHA1

41561f4a138742002a8bbf1fae90a6247d0f5e38
SHA256

88fbb7f768c0897f183dca105e14f4e86060dba5578e30999a8bacf03d6395b1
SHA512

efcb5b0baa6f246c4913d142ee47374b5c42c7cf3d713aac71d36956ee9f01079277a3ae9b3e19bc025fa8ed97da494848455a30d334d2ca4b45db03f8b4d7c7
SSDEEP

1536:Yb/gYhxTSOR29N9bW1qoOTcRcbvh9X8IqhkAS+uFQabUpjVrs2ryrd1vUQuqwci/:YTgOxTuNcQw03Kk7+HagHs2quciu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b16c4c53137d7d37d36674a69b7a8db7_JaffaCakes118

Files

b16c4c53137d7d37d36674a69b7a8db7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d78bdd911f78499e5e0604cb855bdcee

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleTitleW
GetConsoleAliasExesW
CreateSocketHandle
GetLongPathNameA
ReadConsoleA
GetConsoleCursorMode
GetDefaultCommConfigA
GetGeoInfoW
InterlockedCompareExchange
GetNumberOfConsoleMouseButtons

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE