c7c93fa28aed73ec46a04e299a6d61d8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c7c93fa28aed73ec46a04e299a6d61d8_JaffaCakes118
Size

123KB
MD5

c7c93fa28aed73ec46a04e299a6d61d8
SHA1

994034263bc853f0c6208ccca6567b4292e15ecd
SHA256

3016417fbb638d05c9daf0c2f65acedbef6d9c8953a5b18fd3b7dba0b37aa372
SHA512

e965f912085e32cdc9b527e48464a1ce397a45b48b608e523859cd4f2a0c082def1d4e7b078292a2f0caab4fcfb76503fca83b7c079fcc0535259f97322c77c6
SSDEEP

3072:UtbLvQaQmireZ8x/V7Qx0t+Ss7WGDrPfzIV7KCB:UtHvfQN/5y5SPWQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c7c93fa28aed73ec46a04e299a6d61d8_JaffaCakes118

Files

c7c93fa28aed73ec46a04e299a6d61d8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9657cc2d7c88dbe7589092dde7854aec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumResourceLanguagesA
GetOverlappedResult
ShowConsoleCursor
SizeofResource
WaitNamedPipeA
GetConsoleDisplayMode
EnumResourceLanguagesW
InvalidateConsoleDIBits
CreateTimerQueueTimer
VirtualUnlock

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ice
Size: 67KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE