b398ed4adefee6e0ab71b7e5c1d81c7c_JaffaCakes118 | Triage

Sharing

General

Target

b398ed4adefee6e0ab71b7e5c1d81c7c_JaffaCakes118
Size

76KB
MD5

b398ed4adefee6e0ab71b7e5c1d81c7c
SHA1

253855a525ea044d1703d3f9e2a3510fd3b6c1b5
SHA256

1745fbf08cbcf7dbe444880905a7a3bb7ccc80153f2df6c9931a6703e2816cfe
SHA512

9b99cf2a58bfd59537637392a7844849b59f7710fb37f4a4b08eb1bd98b6162ce7937cb7815db0afc487c98f77c2fa72280f707dd7b097da0ea403ac98fab90a
SSDEEP

1536:HcEcEcE8fx5LlcoAETSI7iRLqXWI7MgUucO18earCK4PyiYpjVrs2ryrd1vUQuq6:HRRRUx5LlqjI7qETOlZqyBHs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b398ed4adefee6e0ab71b7e5c1d81c7c_JaffaCakes118

Files

b398ed4adefee6e0ab71b7e5c1d81c7c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d83c558f4b2894fbe7ee8619c371a9f7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleCtrlHandler
GetCurrentThread
DisableThreadLibraryCalls
RtlCaptureContext
GetTimeFormatW
GetCurrentThreadId
GetConsoleAliasesLengthA
LZOpenFileW
VirtualQuery
SetLocalPrimaryComputerNameA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE