c772753fd99a86ae4fddd234ee779a8f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c772753fd99a86ae4fddd234ee779a8f_JaffaCakes118
Size

119KB
MD5

c772753fd99a86ae4fddd234ee779a8f
SHA1

c0a5804438a3cdc227a99fa3a1d6bda92a4b1ca9
SHA256

3a7b17d12430ac15ecc2df7c2a6fa026e33de9e6c9c808f6e8d6ac36d821f780
SHA512

06db7a1979a772d56b1fc3d061a78d44d1a0145c0a6787aa04de72ba7ecefa746e2bd0919951f93c9f5befd8657e14f23aed41bbdccad5ea5fb6be866982dcb8
SSDEEP

3072:Dny5QUl9ekaa6SoCWqdmv/Et1r2Re6g5cij:Dy5QUl9ekak7kktt286gd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c772753fd99a86ae4fddd234ee779a8f_JaffaCakes118

Files

c772753fd99a86ae4fddd234ee779a8f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6f649012e4292649c2f8afdaab7d08d6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoW
SetConsoleFont
lstrcmpiW
WriteConsoleOutputCharacterW
ReleaseMutex
DelayLoadFailureHook
CancelIo
LocalHandle
GetConsoleCommandHistoryW
TrimVirtualBuffer
GetFileSize
GetConsoleHardwareState

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE