db259d782cacc487b93dd743c059eda6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

db259d782cacc487b93dd743c059eda6_JaffaCakes118
Size

83KB
MD5

db259d782cacc487b93dd743c059eda6
SHA1

056930f629461c507c6ccf903f4c914c53b4ecb0
SHA256

aa7e3d35d77042bb25d59a32ef33f02840230dd262d7e7c84ae3be476e062f9e
SHA512

b904a221202d3227ca4a4adc8ab1e6977adf7bbdbfd7d1d3c1b6f09585021cca8785f12ff6e00cfe875e51a6b79963e8d584cc25971fdfc63819788b2db35ffd
SSDEEP

1536:czCmrPLP94qrb5CkitVd+YpEZFeTN1QzwlMGqAv+lOEcF03jEErxTWDTMqhGKYI6:cz3gkYV4YpaFeJuzwaG37FojBkMqhGK6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db259d782cacc487b93dd743c059eda6_JaffaCakes118

Files

db259d782cacc487b93dd743c059eda6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

645a06b66b5b698786822450e0b8327c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumCalendarInfoA
GetHandleInformation
SetConsoleTitleA
WriteConsoleInputVDMW
GetFullPathNameW
GlobalDeleteAtom
InterlockedDecrement
DebugBreak
SetComPlusPackageInstallStatus
WaitForMultipleObjects

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE