b4b2b4860c4266c3edfffd6e0e1174bb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4b2b4860c4266c3edfffd6e0e1174bb_JaffaCakes118
Size

63KB
MD5

b4b2b4860c4266c3edfffd6e0e1174bb
SHA1

6cc9e199fc75b020f4b93eef4e4168d0f2691a5b
SHA256

b80fc17cc25a6830ffad382e73391db9e72e1e7f7b2c872ea48b2c3ac84f77d2
SHA512

e2c3fd66bd1d1816288c12d407103d00a03da26881e2ad17a9848bde25c6a599228dcf0dc4471c039422027518610c4ac195b6c1aa947bbce36128d0e498b0d8
SSDEEP

768:RjRZUsh75DZEaQQPFk7qDFGUHjCbnsRsngwvQBFuux1nr3yC2L94AED74v09x/wm:RjRZB/i2CbnsRyi/IC2LuAEDd9xa8I2V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4b2b4860c4266c3edfffd6e0e1174bb_JaffaCakes118

Files

b4b2b4860c4266c3edfffd6e0e1174bb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ca450863c9d0dd9cb13883cac387da67

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WritePrivateProfileSectionA
EnumLanguageGroupLocalesA
UnmapViewOfFile
GetStdHandle
EnumUILanguagesW
GetSystemWow64DirectoryW
GetNumaNodeProcessorMask
FindFirstFileA
SetThreadExecutionState
ReadConsoleOutputA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE