dfdd3f9a4061c1a47ed873635b8d9679_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dfdd3f9a4061c1a47ed873635b8d9679_JaffaCakes118
Size

63KB
MD5

dfdd3f9a4061c1a47ed873635b8d9679
SHA1

bb692a98390106b71ff38a7f6975fb84d21c7fb3
SHA256

a05d69249416b621edd23b671ec333712d61d8831da0237ba0dc401ea21e7ff2
SHA512

283b9f6fa55c7f438704a1dfc1a0f841ca97b7758fe1308cdc11286623c2b7cd7694d4407268e29518a82294400a792dde199478283add063e9c9fadccf35367
SSDEEP

1536:56666eQrPOUEd+35T0CiJfbfDsEM7DBZ8/dYmc/c2:gQrGUEd+357iRbfDsTDBZI+P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dfdd3f9a4061c1a47ed873635b8d9679_JaffaCakes118

Files

dfdd3f9a4061c1a47ed873635b8d9679_JaffaCakes118
.exe windows:4 windows x86 arch:x86

209707876d5a5285b3270a0ecf9c58be

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnhandledExceptionFilter
HeapExtend
CreateDirectoryW
IsProcessorFeaturePresent
GetConsoleFontSize
NlsGetCacheUpdateCount
OpenMutexW
GetModuleHandleW
FindFirstChangeNotificationA
AddConsoleAliasA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 48KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE