fe0749eb106f7eb4115715e2937e3498_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe0749eb106f7eb4115715e2937e3498_JaffaCakes118
Size

56KB
MD5

fe0749eb106f7eb4115715e2937e3498
SHA1

7f98d549ea55ad6d6532110f95ded8e6e281e41b
SHA256

2dc2d28fda2865763513e80786367d2a8bb3a19c490fc178bc2e3580ee2fbd3a
SHA512

e5671a1e3b6a109bc16872daa3d240832b034d533ae9d6e6e0ffeca9d9fb3244177408ec88d1927c72b742e5fa66b5661a941fec0b15baedad21f45a13833a6f
SSDEEP

1536:m8sxN+cgFy7SzoTfC4H9DEbNygKV0fPKX+0xPBi5aJq+YfNs7Jao2tz:lbAXV60xPsqxJp+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe0749eb106f7eb4115715e2937e3498_JaffaCakes118

Files

fe0749eb106f7eb4115715e2937e3498_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a4787b294ad5e579f6f9d09c6794e5f1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsolePalette
IsBadHugeWritePtr
SetConsoleMode
QueryInformationJobObject
SetCommState
GetProcessVersion
GetThreadSelectorEntry
WriteConsoleOutputA
FreeLibraryAndExitThread
IsValidLanguageGroup

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE