c086d17297293ca1bbf833ebb0ef14f7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c086d17297293ca1bbf833ebb0ef14f7_JaffaCakes118
Size

63KB
MD5

c086d17297293ca1bbf833ebb0ef14f7
SHA1

e9f4546c6c0c18700a797001f1d5b9c7f3eeb44b
SHA256

633e24397ced731d45c67aeef1032c214e8c4e6d37596be8c6500d90bf45240d
SHA512

3cdf24c3cddc2cb24bf624c14e54b639b8fdbd0102c04c6468ef1d2e2c279692f6a4f979853523402e136f36ee6398e61238d2074c4e099435fe07e9e1de7712
SSDEEP

1536:vI5WRCs6LalYECpW+cY/9jGA8zV4iRxk+n19V+sLQ7I:vI5Lec3p9aR4iHk+n19YuUI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c086d17297293ca1bbf833ebb0ef14f7_JaffaCakes118

Files

c086d17297293ca1bbf833ebb0ef14f7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e2e814e21585d644150cd0abaf506021

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCalendarInfoW
ReadConsoleOutputW
GetThreadIOPendingFlag
SetFileApisToOEM
GetCalendarInfoA
FormatMessageA
VerifyConsoleIoHandle
QueryDosDeviceA
LocalShrink
LZCopy
VerifyVersionInfoW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE