dc978c0eed7f4b38e0fd238228cd2af0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dc978c0eed7f4b38e0fd238228cd2af0_JaffaCakes118
Size

56KB
MD5

dc978c0eed7f4b38e0fd238228cd2af0
SHA1

f34a7254483a906d275a9c72ba2de23555caf95f
SHA256

0ec6710d58128d86e1c31aaccf787791363a31ef715bbc430da50f63cc301bfa
SHA512

69fd3bcc6fb1742faf367c6e408b59d468ba6435fe29e4e812a1a6ad017d06bfe3b28f282afa039063819f706d250ea909cedd9b1d36a1a9ca6733483e2d9427
SSDEEP

1536:X2wrPVOeprfqnccNyDH1b9u4SU+zsagsJdGAoxH+EL41+:r5ln0EAoNaw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc978c0eed7f4b38e0fd238228cd2af0_JaffaCakes118

Files

dc978c0eed7f4b38e0fd238228cd2af0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

96c4d8dd2852661a1854808730fd1dd0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VerifyConsoleIoHandle
GetNextVDMCommand
SetConsoleOutputCP
WTSGetActiveConsoleSessionId
DosDateTimeToFileTime
VirtualFree
LoadLibraryExA
ReleaseActCtx
GetConsoleInputExeNameA
IsValidUILanguage

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE