b9919dc0654ab1159a51ab6727e24619_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9919dc0654ab1159a51ab6727e24619_JaffaCakes118
Size

63KB
MD5

b9919dc0654ab1159a51ab6727e24619
SHA1

5d51f06e3e49286147b02d3e4e935e9db10a16e2
SHA256

189074830c1d051b34ee0d73336f6cc3755b6c55f33513280a0b1a2b3c21978c
SHA512

6d2b884863b0cd850dfb7bd52dde6ebb05080581abac139cbe4440ab113c4121584c61ffa0b40a271ff72048721928a5904f49f63ea7d9fbc35a579f354885f9
SSDEEP

1536:6tHgu6uR/pJ5OZISzftsSf1eKvQ7vNdjv+QNrjabr:6tHguDI9FIhlPja3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9919dc0654ab1159a51ab6727e24619_JaffaCakes118

Files

b9919dc0654ab1159a51ab6727e24619_JaffaCakes118
.exe windows:4 windows x86 arch:x86

44f5333e0189c7645410562865eab20f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCalendarInfoW
SetFileShortNameW
WaitForMultipleObjects
CloseConsoleHandle
CheckNameLegalDOS8Dot3A
BuildCommDCBAndTimeoutsA
CallNamedPipeW
GetStartupInfoW
QueryActCtxW
SetEvent
GetSystemPowerStatus

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE