fd33b0ca0e63546846691f2ae56786c2_JaffaCakes118 | Triage

Sharing

General

Target

fd33b0ca0e63546846691f2ae56786c2_JaffaCakes118
Size

56KB
MD5

fd33b0ca0e63546846691f2ae56786c2
SHA1

7a1a1c6ec3b8ad2e721fa381822ca9b080387103
SHA256

aed1930225a34ef5bbe64512127a41e1166e3e544191ac78e1b0ddac5e75e7e1
SHA512

615203a6c5fc3279bb032a118338008bfc0e0638619cb1d138aadf48a0499a9abb347c20ebae301bb82053e0104995ba96c03e538eeac0d81ce3ec4fb0fb911e
SSDEEP

1536:Z2mOxPV2MMu1p11YUTY7DlJd9CYAgamYqcwg:ZAxFD1pQUTY7LdVhuB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd33b0ca0e63546846691f2ae56786c2_JaffaCakes118

Files

fd33b0ca0e63546846691f2ae56786c2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6da446e042e104ee155fd4f2142eda36

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadConsoleOutputA
RegisterWaitForInputIdle
GetProcessHeaps
SetConsoleTitleW
VDMConsoleOperation
SizeofResource
SetConsolePalette
GetCPInfo
PeekConsoleInputW
EndUpdateResourceW
BaseInitAppcompatCacheSupport

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE