c786163f2612d6d95625d44513bf803b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c786163f2612d6d95625d44513bf803b_JaffaCakes118
Size

27KB
MD5

c786163f2612d6d95625d44513bf803b
SHA1

e278d5015f90a35634b30fd428e198ebe7ed5995
SHA256

c616776dffcb4a4d76894a3ced05ffe92a131349011c350a8456259363a1f20e
SHA512

503bb41aec5c144001200395b705e06224cec2d3a7a60cd93e0d09ccba7a10049725d0b3faf844ce1ff0046fd68dbc3fa6105baba038e316ed92e52704501c85
SSDEEP

768:czLmBtKoxjit6+Gt5I9KRKmK+CqhZatd:yw8t6+G+nQCEZatd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c786163f2612d6d95625d44513bf803b_JaffaCakes118

Files

c786163f2612d6d95625d44513bf803b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4f97e6b543382c477f352e978575775f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeConsole
SetConsoleOutputCP
ReadConsoleOutputA
TermsrvAppInstallMode
VirtualAllocEx
CreateConsoleScreenBuffer
ReadConsoleOutputW

dhcpsapi

DhcpDeleteServer
DhcpAddServer

dinput

DirectInputCreateW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 372B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ