d5c7a8e7c62a463be53c7cee08654525_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d5c7a8e7c62a463be53c7cee08654525_JaffaCakes118
Size

180KB
MD5

d5c7a8e7c62a463be53c7cee08654525
SHA1

96b11897e24ed6e743f2c3a9d735e4756fa5638e
SHA256

1600c91d89a962e160b47053c7351a638ccd1f898b9b8fd92b71a7443117a146
SHA512

a6edf53a908089bdd49deb8bb4b0b0788d952f5dcf8219e25f4839855a128a08ab49e8a66c9fac13871213fc4fa9c2e32bc1b483ca83f9a95721bd370a102b3d
SSDEEP

3072:YYi0QGC/3EEXPbyvYDubMVMRISqOifEHS4zwxmkb+ORz1sybsHVOWo:DEG09XDy20RNqO4sSIwnJR5ZC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5c7a8e7c62a463be53c7cee08654525_JaffaCakes118

Files

d5c7a8e7c62a463be53c7cee08654525_JaffaCakes118
.exe windows:4 windows x86 arch:x86

65fa95d9c7063434ecc43b2ae850d63a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateNamedPipeA
GetFileTime
GetConsoleCursorMode
WaitForSingleObject
UpdateResourceA
FreeEnvironmentStringsA
CreateEventA
GetCommandLineA
GetCommMask
FreeConsole
ExitProcess
WriteConsoleOutputA
DeviceIoControl
DeviceIoControl
VirtualAlloc
_lcreat
GetDriveTypeA
EnumSystemLocalesA
GetConsoleInputExeNameA
SetConsoleOutputCP
ReplaceFileA
OpenEventA
WriteConsoleOutputCharacterA
GetComputerNameA
GetCommandLineA
PurgeComm
lstrlenA
InterlockedExchange

ws2_32

send

Sections

.itext
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 156KB - Virtual size: 801KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ