b91a8f05bf6434399e5cbabf307e775d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b91a8f05bf6434399e5cbabf307e775d_JaffaCakes118
Size

172KB
MD5

b91a8f05bf6434399e5cbabf307e775d
SHA1

d98c8b9ba592b47543569fff4db7b3cb0a6d17a7
SHA256

3c66ac2acfde2c9b372d1e771ed004f21ca44394f75589f1af06fb680429227f
SHA512

89680bf78223a2d1d57264d94c86028ecb6004bd3cbc0bc7dee29afd1dc475c78f95c54e689e6dc44916cd77b065710f6a30eea4d19b17689d28c196bc1c1de3
SSDEEP

3072:qWZ7pYb4uAqP+lu98PqZwDPZPOUQ9NcKQGhonO+ShXRNALblMDl:qWZ7Bu3Iu98PqAx2Dc/G8rShXrkblMh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b91a8f05bf6434399e5cbabf307e775d_JaffaCakes118

Files

b91a8f05bf6434399e5cbabf307e775d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5e3e40020deae46b658aaa8a9030e1bd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessTimes
InterlockedCompareExchange
HeapWalk
TerminateThread
EscapeCommFunction
WritePrivateProfileSectionW
GetConsoleAliasesA
FindFirstFileExA
GetConsoleInputExeNameA
CreateFileW
UnlockFileEx
GetModuleHandleA
GetConsoleCommandHistoryA
SetCalendarInfoW
SetThreadPriorityBoost
EscapeCommFunction
GetUserDefaultLangID
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.code
Size: 4KB - Virtual size: 137KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 156KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ