079add12ca43389fa9bd117948025ec3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

079add12ca43389fa9bd117948025ec3_JaffaCakes118
Size

63KB
MD5

079add12ca43389fa9bd117948025ec3
SHA1

a66bcc27bb5390ef57c02c724d2c3e8ae6a99e2b
SHA256

dd66ca8ad50943efbc82273b8cd5a55b72e728f26c008f1d5986c5763d02e0fc
SHA512

5dc65a27e45ab85f991a21dc2f94474a0bcb0a237ee06156cb9e601e9a5f527e10ddb98fefb4234a080eb19abad91a54dfc9e83c94224bee6a610e9d8d2ff51f
SSDEEP

1536:Ob9RlPEFe9W5mi5G7p/wPvpP0mWM1BcQ6gVz9aFv:OJkF2WIigeP971Bik9q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
079add12ca43389fa9bd117948025ec3_JaffaCakes118

Files

079add12ca43389fa9bd117948025ec3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3fb8b7ca8f0c15ef6a20904a2c6ccd54

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RequestDeviceWakeup
CreateFileW
GlobalAlloc
ReadConsoleOutputA
WriteConsoleW
GetConsoleFontSize
GetDllDirectoryA
SetNamedPipeHandleState
CreateDirectoryA
LZCloseFile
WinExec
GetConsoleKeyboardLayoutNameW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE