d4c52d257c53c03b568c3003f33c7ffd_JaffaCakes118 | Triage

Sharing

General

Target

d4c52d257c53c03b568c3003f33c7ffd_JaffaCakes118
Size

62KB
MD5

d4c52d257c53c03b568c3003f33c7ffd
SHA1

2ea0718f39fa5a27a2c4d06a4f1e57e800db5b45
SHA256

3b4c03c790ba98974e5e7d11b8b29ccad479b85650c01c2f2d106ad307031f30
SHA512

085de2635e815a585c656cfd451185f82dd01fb7998f5db83e99a0f88b3fa4bc7ac1b1f0e8ad760fe63f45f0be0535ad96b605b998d3563e4995c122000f9ff2
SSDEEP

768:eKydPUN/FcZqjOWfl+oyfAFjLFN9WzPmbqcbyl8aqmsYgFXJSRNU8p+0lKYJK60g:eWv7rNUmbqa2s/FXt6UEsk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d4c52d257c53c03b568c3003f33c7ffd_JaffaCakes118

Files

d4c52d257c53c03b568c3003f33c7ffd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0ef2595c349a041166a778b2c4a2c559

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameW
GetFileInformationByHandle
RegisterConsoleIME
FileTimeToLocalFileTime
ExpungeConsoleCommandHistoryA
RegisterConsoleOS2
PulseEvent
GetNumberOfConsoleMouseButtons
GetCommProperties

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE