db4aeb1e501eb563b1b91042bc45eb6f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

db4aeb1e501eb563b1b91042bc45eb6f_JaffaCakes118
Size

63KB
MD5

db4aeb1e501eb563b1b91042bc45eb6f
SHA1

b07c81a06b8008d0f4f44281265fc4d66fef67ba
SHA256

374eb61c4b0a03b0ff26c2d37aa43f2494103bb4a497afcd833d749199c8e85d
SHA512

b94f6115c28eee2db0045910cbfc89b1957324bd94aae9e9e1a7efa3cd3bce8e885d99d8698ec4362a35d99d9bbbda0b146e0b08a3bb92a460b6fa3bd3cfa261
SSDEEP

1536:ukKkW0xnOs0tZBuAa59Ib+wyTDW4f5DX+GVcOqx9Eq7R:GntZBuX523yNf5DdWVPnR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db4aeb1e501eb563b1b91042bc45eb6f_JaffaCakes118

Files

db4aeb1e501eb563b1b91042bc45eb6f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6ee9e6c3e89027e0b8db9b094ace8f9b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineW
GetDateFormatA
LoadResource
SetDllDirectoryA
GetCommTimeouts
SizeofResource
GetStringTypeExW
SetCPGlobal
AssignProcessToJobObject
_lwrite
SetCurrentDirectoryA
RegisterConsoleVDM

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE