d42429a57e7a4ec359eb7043f52e330a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d42429a57e7a4ec359eb7043f52e330a_JaffaCakes118
Size

71KB
MD5

d42429a57e7a4ec359eb7043f52e330a
SHA1

9cf1456770d52ff5e1cca4770c268dd7b38510c6
SHA256

56933b84644b6ffcf1d814dee12dddf9182558d56ee10ec1370ebe35f2980eed
SHA512

3e7279ff215d9dc51190d0c8ba1796a2c278358ea4ce24eb232c0523f3568cc2669e4cc5ea52967778065f85a1d2c52009125d0e7481aa59376a2b8ab292ba99
SSDEEP

1536:GBFB2py249+RJfBm6hbD9sdHhCJdfx+xguZyM5XE6n:Qup0C1Bm6BD2dHgLZgguZHZn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d42429a57e7a4ec359eb7043f52e330a_JaffaCakes118

Files

d42429a57e7a4ec359eb7043f52e330a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b8084b3e4f234d56df9b60dbc5f50340

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CommConfigDialogW
CreateHardLinkA
GetCurrentDirectoryA
TrimVirtualBuffer
VirtualAlloc
VirtualUnlock
TransmitCommChar
DosDateTimeToFileTime
ReadConsoleOutputCharacterW
WriteFileEx
SetComputerNameExW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 56KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE