084b5a0c392bf58acf4f89eb1f082ae0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

084b5a0c392bf58acf4f89eb1f082ae0_JaffaCakes118
Size

76KB
MD5

084b5a0c392bf58acf4f89eb1f082ae0
SHA1

b11606f5c3940e432c4a57813d7ff08693707cdf
SHA256

e6981eefd963f3045c509bec67e2623175fcdb689c851be23a6071845566600b
SHA512

c46a72d1c8af9505e69da335c7da4cf07d6c7ee61f6882fb5cf9594465f35a76f8be370b612ac3874925fb1dd475a3153e2d03ab27f750a06366a88d846a5ae9
SSDEEP

1536:OWZZZKf9HliXx/1lcJ4bTRMr8KNoq6McRQyScaNpjVrs2ryrd1vUQuq6:OWZZZgYB/LZHRMr8KNoq6DycaNHs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
084b5a0c392bf58acf4f89eb1f082ae0_JaffaCakes118

Files

084b5a0c392bf58acf4f89eb1f082ae0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

98973376028c508c17280d0f97bdf5d2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ClearCommError
LZDone
LZRead
IsWow64Process
GetLogicalDriveStringsW
CreateMailslotA
GetCommandLineW
PeekNamedPipe
GetVolumePathNameW
LCMapStringW
GetCPInfoExW
ReadConsoleOutputAttribute

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE