d0e793e6d06dccab622d7754113e7163_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d0e793e6d06dccab622d7754113e7163_JaffaCakes118
Size

181KB
MD5

d0e793e6d06dccab622d7754113e7163
SHA1

64964f5b3de25a4192096ddbc25477cfcb71bb23
SHA256

52ccf1b978da24b8a68096db87bf40a291af415ba39120ddc0a0191aa76ac974
SHA512

ab7d35cb52225f37d6612efcc6ea0c5d893b8e989c8fcc825944f5cda4b2ed6dbbe2623a9dc601945bf7125d21bc7b7fac11a5f134b48261420be24730479cd8
SSDEEP

3072:51s27lB/z4659YkYMd/WmkbeieiS9nua4+ZLTxiV3psjM9QppLG7KGoM:H46knMd/Sbei5Se+txoKLLG7K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d0e793e6d06dccab622d7754113e7163_JaffaCakes118

Files

d0e793e6d06dccab622d7754113e7163_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2b149fc2e0430a855be7190338d9b871

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetVolumeMountPointW
MapViewOfFileEx
AddConsoleAliasA
SetFileAttributesW
SwitchToFiber
DelayLoadFailureHook
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.text
Size: 5KB - Virtual size: 811KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 172KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE