ba9e25d347a68d5adc82cd411447769c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ba9e25d347a68d5adc82cd411447769c_JaffaCakes118
Size

83KB
MD5

ba9e25d347a68d5adc82cd411447769c
SHA1

28c33f110f0434279231aeca0d0c870d488863d6
SHA256

4dbc5d2c6a7f71fa308e246495511cf08253b1fdb4166dba4c522156170a36a7
SHA512

179528a4974661e3bcf9efc80a3011a0d059b5148939b7deef53a69ad4e88826ba9f9181ea11cacca725b9dd449c087cb48d1a84be59e53628d1947aaf44890d
SSDEEP

1536:V5555wYSK5B34wLjso5IcMXcUk3e6ZNO07RQjEErxTWDTMqhGKYIZTET8bDQ:VS3wXnMXcJL97ejBkMqhGKZTbbc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba9e25d347a68d5adc82cd411447769c_JaffaCakes118

Files

ba9e25d347a68d5adc82cd411447769c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c0c9636ea1ecdc2c4006a337215a4034

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BuildCommDCBAndTimeoutsW
GlobalAlloc
GetConsoleCommandHistoryLengthA
GetComputerNameA
RtlMoveMemory
GetPrivateProfileIntA
GetProcAddress
GetThreadIOPendingFlag
RestoreLastError
GetCompressedFileSizeW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE