b92bfedcfb386ec05b28f87c086bfd8f_JaffaCakes118 | Triage

Sharing

General

Target

b92bfedcfb386ec05b28f87c086bfd8f_JaffaCakes118
Size

83KB
MD5

b92bfedcfb386ec05b28f87c086bfd8f
SHA1

2cabd677c3fbb4e6ae6955586a6eb8e98b953067
SHA256

4143ede87d821adcb4dc32a25e020f348919f4bd862b1d62d78cfab118dc9c05
SHA512

e0e4d7802be6e374439f74e64689f94aaa1fed073c22b2243ebfa1ea5d8112e2188d955db84b79cfbf5038f5e553fcc77195476f2dd7b41cca5efd7f4a5d137e
SSDEEP

1536:9sc7kjQWSiUlfK0bSc5/jEErxTWDTMqhGKYIZTET8bDQ:Oa+RSLfK0bSc5/jBkMqhGKZTbbc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b92bfedcfb386ec05b28f87c086bfd8f_JaffaCakes118

Files

b92bfedcfb386ec05b28f87c086bfd8f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

21036c939fb378cd7578a355e3bb8624

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetBinaryTypeA
ExpungeConsoleCommandHistoryW
EnumLanguageGroupLocalesW
WriteConsoleOutputCharacterA
IsDBCSLeadByteEx
ReadConsoleInputExW
Module32Next
GetHandleInformation
ScrollConsoleScreenBufferA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE