d0704cb60edc34bf3ea29bd589783485_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d0704cb60edc34bf3ea29bd589783485_JaffaCakes118
Size

63KB
MD5

d0704cb60edc34bf3ea29bd589783485
SHA1

587c3fe4ff4cff1b63ef1574558119a352222eb5
SHA256

91f209d5999354f74268db8b8ca39eba2d3ad0d111df33e25805f16d07153717
SHA512

4da124e7d4e9a5757c96f0b17d85615a69d941c232c231c9a252e9ed9c7589b1ac2684ba5f21d0e102608022d99e782f8b7e3d44a829bd901c7cbad97a9f3e83
SSDEEP

1536:Jki/T7x+6VtjpR93MLe++pNTTEigRr//KAgWIvCS:Jjb7x+8LR6Le+0N3ENRrtNIT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d0704cb60edc34bf3ea29bd589783485_JaffaCakes118

Files

d0704cb60edc34bf3ea29bd589783485_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2fc8def21d6f44d6d4548ae2e0d7d1b8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalMemoryStatusEx
LZCloseFile
SetConsoleNlsMode
GlobalFlags
WriteFile
SignalObjectAndWait
GetCurrentDirectoryA
CreateFileMappingA
SetConsoleCursor
GetConsoleInputExeNameA
FlushViewOfFile

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE