ebd1d36aab12754d98ad3248abd946e1_JaffaCakes118 | Triage

Sharing

General

Target

ebd1d36aab12754d98ad3248abd946e1_JaffaCakes118
Size

86KB
MD5

ebd1d36aab12754d98ad3248abd946e1
SHA1

f25c903ba6902c9c5b65534b55a2142901024ff3
SHA256

91075f9c439e3f7a677a899e7df85b2323974b20d3121f216c2367014458e026
SHA512

273c6c464814690d7776be0afa2459f05e53916fec7f25e42a60156636d5ddd67a6b9f5f51c7c506062cf5e267f3fcb14af23604ed4e5dbfa95ea57f769eaf74
SSDEEP

1536:QhKJa02+0RjUweauZ4gE90GHWPRRjD47xv/5Nf1BnJNP7dcf7T61s5Varlj:QuQgZxP0WPw5Nf1Njdw7T2cVarlj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ebd1d36aab12754d98ad3248abd946e1_JaffaCakes118

Files

ebd1d36aab12754d98ad3248abd946e1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d49416240a887f5135a2a042d4341e39

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateWaitableTimerA
Sleep
ScrollConsoleScreenBufferA
CloseConsoleHandle
GetComputerNameW
GetLogicalDrives
SetConsoleTextAttribute
EnumCalendarInfoA
WriteProcessMemory
VirtualBufferExceptionHandler

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xrdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE