b617818c32d17ab487ef661b834fb8e1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b617818c32d17ab487ef661b834fb8e1_JaffaCakes118
Size

30KB
MD5

b617818c32d17ab487ef661b834fb8e1
SHA1

b05b525d125dea9759df273a95d57a41bd7a93f2
SHA256

693356dfcdf0fb3d19d5cb6c7f747ccdf5655e6932395a14a330a49194d8ec3b
SHA512

991f67774eb4d2c46e4026b1a755986074aea93a3c376ba6ffcc29d1eec892d8e9962077079696c6a1a51ae16826114dc3c266cc4bce1bca333455b180376348
SSDEEP

768:dPpT602LVXNbFZ/BYRxbAHqcbJ+Un4dN:e0sVXr9CNL/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b617818c32d17ab487ef661b834fb8e1_JaffaCakes118

Files

b617818c32d17ab487ef661b834fb8e1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c61669513c166f575df95db8918b641b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
ExitProcess
GetStartupInfoA
GetConsoleCommandHistoryA
VirtualFreeEx
GetUserDefaultLangID
GetNamedPipeInfo
GetPrivateProfileStructW
SetMessageWaitingIndicator
GetConsoleAliasExesLengthW
SetTimerQueueTimer
GetComputerNameExW
lstrcpyn
GetPriorityClass
HeapUnlock
BackupWrite
WritePrivateProfileStructW
GetTimeFormatW
SetCommConfig
SetNamedPipeHandleState

Sections

.data
Size: 4KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ