b37e511eea744c8db5057d01311e2a0e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b37e511eea744c8db5057d01311e2a0e_JaffaCakes118
Size

56KB
MD5

b37e511eea744c8db5057d01311e2a0e
SHA1

5075b09db6544012f95ef5d92331ad1744d1167d
SHA256

079e677bfba16ad4848cd2e3f6cb4de4baef1544a701669ba3642ffe1a590c1d
SHA512

831ed3d9b40745278da3f3415fcc2ebebc2746b04d6f3eb4e47640f16c7e93b051c48aed4226bb83f79c7a425de182e9b8656e21be7a48b93d98c7a93091bcc2
SSDEEP

1536:nCqElBTzLpkSlxNjh05IQcOn0B2nliuN3JZsqsUsVf:nCqEzT/pkkh09/0mliuN5HwV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b37e511eea744c8db5057d01311e2a0e_JaffaCakes118

Files

b37e511eea744c8db5057d01311e2a0e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

304b102d2fe1e2821ebe9e49c4f561c4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExpungeConsoleCommandHistoryW
LocalFlags
QueryDepthSList
HeapLock
CreateFileMappingW
ReadConsoleOutputA
SetNamedPipeHandleState
SetConsoleActiveScreenBuffer
Process32NextW
ExtendVirtualBuffer

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE