bfae9e88247dcd9ceeb8616d8fe699f1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bfae9e88247dcd9ceeb8616d8fe699f1_JaffaCakes118
Size

83KB
MD5

bfae9e88247dcd9ceeb8616d8fe699f1
SHA1

41b9b81fd7f3f51bf57191e8b12b4e36b51d7dff
SHA256

6c1b67e7ec8a420bf907a666b0e4f17d226bc6ce27ff4f4dfbdb8216b900b80a
SHA512

22c7dd857f5d344834e06bc3f56884db2070b0f85a26d2a294877d5e2ffefbc51bb88e8eee4c1c576c855ce4f0c392fe5cc88945adf2f905d7696a46b793d823
SSDEEP

1536:jgzo19Qc/m4SWuLd/1TneC/fOVRg9CUHIjEErxTWDTMqhGKYIZTET8bDQ:EU93/mlWuR/1DeCuVRg9qjBkMqhGKZTE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bfae9e88247dcd9ceeb8616d8fe699f1_JaffaCakes118

Files

bfae9e88247dcd9ceeb8616d8fe699f1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c83822e96f7ff071d65f62a77db7a380

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteVolumeMountPointA
SetComputerNameExA
EnumCalendarInfoW
SwitchToThread
FindFirstVolumeA
HeapUnlock
DuplicateConsoleHandle
HeapReAlloc
SetConsoleMaximumWindowSize
GetConsoleAliasExesLengthA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE