c9894312c46c04a8e21ba1519809e6ac_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c9894312c46c04a8e21ba1519809e6ac_JaffaCakes118
Size

62KB
MD5

c9894312c46c04a8e21ba1519809e6ac
SHA1

51ef5e717f16da944e9ce69d5f052a37aca80f8d
SHA256

632a8f0fb54859484d729d76e13dcd6dec5c03d3ced22a8b902e88423d73cd91
SHA512

fec008e481d52d8938358f83179879042bbb851701aa2193e017c1d8b7fbaa8e96d36b73613a70f0f8136a55ef012643ab4e6021226cf5bc7665ddd479a316ad
SSDEEP

1536:YXDkp0uhcbEWJhgSbc/REEn1NjzFTYy53AKvtDy3JNQ/7P:YXDkp0uhcIWRA/qEn1DYy5AKlMNQb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c9894312c46c04a8e21ba1519809e6ac_JaffaCakes118

Files

c9894312c46c04a8e21ba1519809e6ac_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c6a2bc94ee2b735d67aca084ba3ae9c4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalMemoryStatus
HeapExtend
EnumSystemLocalesA
GetTapePosition
ReadConsoleOutputA
FreeVirtualBuffer
GetPrivateProfileStringW
GetConsoleOutputCP
WinExec
RtlFillMemory
SetConsoleTitleA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE