b7c9ba17211f511ae217a56393e33e6b_JaffaCakes118 | Triage

Sharing

General

Target

b7c9ba17211f511ae217a56393e33e6b_JaffaCakes118
Size

83KB
MD5

b7c9ba17211f511ae217a56393e33e6b
SHA1

88d03b6d50989c054137c774a5dc821471b16c7e
SHA256

fb69f59224da64bb6929e83630ec9001dd0f7a867781362afab7d06d31085a00
SHA512

d4f8c1de72fddbb09d03dccd98028e5efc64df9a0969799aefcff85e61da0a484229d7953d0a3f07bac5f751df1d0c28e0b9c66005dccc44e7ac759c75273f08
SSDEEP

1536:hUyyyyGFAIkjcjJwRFADilPlhGVdjLlqAVqDVzokdDYdBjEErxTWDTMqhGKYIZTn:SIomJw0MlorlJV4u0YdBjBkMqhGKZTbZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7c9ba17211f511ae217a56393e33e6b_JaffaCakes118

Files

b7c9ba17211f511ae217a56393e33e6b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

86146d971b40933b8be846903df9f171

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstFileW
MultiByteToWideChar
EscapeCommFunction
GetTimeZoneInformation
ClearCommError
WaitForMultipleObjects
RemoveDirectoryA
SetConsoleTitleA
SetCPGlobal
ReadConsoleOutputW
SetConsoleMode

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE