b31e03fc8be8f58dc789c539539b5468_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b31e03fc8be8f58dc789c539539b5468_JaffaCakes118
Size

116KB
MD5

b31e03fc8be8f58dc789c539539b5468
SHA1

94a9b9cf0a7dad110a855c8985384368f357385f
SHA256

17090a3f2cadce1ba7b97b658f8d3685ed821a122903f83b70482b244eb8e6c2
SHA512

18280413de34f0b4d16e57031f6fcbdf6564b8be42a7f68bf9d4a38219acb10d8f02f337c1ba55b6a1e5725b66ab5d626c87d751fedb06837dd9a9a42cc1dabe
SSDEEP

3072:KMntihQPRD4focyn596nnba+6OGy26lSDw5ObUZI:w0epyTiba+VwwAUZI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b31e03fc8be8f58dc789c539539b5468_JaffaCakes118

Files

b31e03fc8be8f58dc789c539539b5468_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a682f29f10f5b002a56c3d14a46f7b36

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
ReadConsoleOutputA
SetCalendarInfoW
lstrcmpiA
LCMapStringW
GetModuleHandleA
RtlUnwind
TerminateThread
WriteConsoleInputA
Module32NextW
LocalReAlloc
QueryPerformanceCounter
GetTimeZoneInformation
GetCurrentProcess
SetConsoleIcon
CreateMailslotW
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.text
Size: 5KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE