b789d0fb1fa80a303221e825a1b32e4f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b789d0fb1fa80a303221e825a1b32e4f_JaffaCakes118
Size

60KB
MD5

b789d0fb1fa80a303221e825a1b32e4f
SHA1

96ca922f32c0ef3895011d8afcde41f4dbe61291
SHA256

04e1795701b3b81e9bc9b7b1be92f68485068254591e8e7eae1db1820461f14c
SHA512

6b15caa74238d4138ebabe83f49fa106c16f1e83115524eb47ae302605a1d7e9671f9244437d4f2638ff010db21c6d8bc309232194b63acf712f6da0197e3bb5
SSDEEP

1536:Y16WVXVev0VxQF4a7OQfQnn1UDyR6ZeHHh5Le1at0kAIRZlcSle:YkWWKOWaKQfmWOIZeh5K0t0UR75c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b789d0fb1fa80a303221e825a1b32e4f_JaffaCakes118

Files

b789d0fb1fa80a303221e825a1b32e4f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

647caf0492555bee12a3a4e4f5cfb198

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
ReadFile
SetConsoleTextAttribute
VirtualProtectEx
ExitProcess

user32

GetTopWindow
GetWindowRgn
GetUpdateRgn

Sections

CODE
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tdata
Size: 256B - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bctfhq
Size: 53KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ