f50d65867bf2701d1c2153653ef441b5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f50d65867bf2701d1c2153653ef441b5_JaffaCakes118
Size

63KB
MD5

f50d65867bf2701d1c2153653ef441b5
SHA1

9245806f4dd4db2e99bc57ceae450aa5d8ece141
SHA256

ddda7862ceda656c7596f81eebc6b2a71c648cce2205f79024ed005ffecb0134
SHA512

b82714bb2f20e9acd92342a8a3cfe31737263f157d0fedfbed84f81e31eb5dc7b83355b918d17ecd686bed504f8b9db251f818e1ed0a9db349d559be32ea6693
SSDEEP

1536:QOIMhQxaHDVLuJvqo5wxklI447EHi79UTKulpZ:hVhrhLuJvX5ACZ5ixUTZrZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f50d65867bf2701d1c2153653ef441b5_JaffaCakes118

Files

f50d65867bf2701d1c2153653ef441b5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ee91a2b58547d16085c08a70d9c7d33e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CopyFileExA
UnregisterConsoleIME
SetConsoleCommandHistoryMode
CreateEventA
GetVolumeNameForVolumeMountPointW
BuildCommDCBAndTimeoutsW
ConvertDefaultLocale
FindFirstFileExW
SetInformationJobObject

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE