c166d7b57324f07ed72766c20bdd4132_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c166d7b57324f07ed72766c20bdd4132_JaffaCakes118
Size

56KB
MD5

c166d7b57324f07ed72766c20bdd4132
SHA1

0600a6f7af80536860dbc9864ce6879edaa7912f
SHA256

4e131647953d3936631d47d097cf67c3e707bdbb995f72f727991243af40db46
SHA512

e2aa01afcf0b42ec5bd43de965ec970b640d94755da66da9392e3082e80b98ecdeee3f1dc1a0b7accaae267ce622f478f081eda3bb01358fdec8acdd2b94c045
SSDEEP

1536:wpUoYvFCWMV29Z9g7qJBQrqT8jP07+hNbPCQB4:zBvFCme7FrlDkuxLB4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c166d7b57324f07ed72766c20bdd4132_JaffaCakes118

Files

c166d7b57324f07ed72766c20bdd4132_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f48b31d83f49b4940e672d5bde84dc84

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WritePrivateProfileStructW
GetVersion
GetCommandLineW
OpenMutexA
EscapeCommFunction
FillConsoleOutputAttribute
IsBadStringPtrA
FlushViewOfFile
GetConsoleAliasA
lstrcmp
SetConsoleTitleW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE