108fcaf699e412a91e1c1947fe354730_JaffaCakes118 | Triage

Sharing

General

Target

108fcaf699e412a91e1c1947fe354730_JaffaCakes118
Size

14KB
MD5

108fcaf699e412a91e1c1947fe354730
SHA1

5d5a9105dd88bf5a78ba30e3b2a74217880a283c
SHA256

2447e7aa0b93d757940a2568c75dccf3e014e8df6cac59b4498b99926a0aec72
SHA512

0b59019d6a716fab9108e7e9591da5ac96da877309c9d9f8d32b1967d49f68e7f06b3d41fa8dee24f8d10d7c440ba43ee79a3bc5a5714d49077c2eccf094cf75
SSDEEP

384:7S3wUhPnaaVWdU9P0MKva1rqH8OZhppTD:7mnhPnaaVWdU9PYC0Tp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
108fcaf699e412a91e1c1947fe354730_JaffaCakes118

Files

108fcaf699e412a91e1c1947fe354730_JaffaCakes118
.exe windows:4 windows x86 arch:x86

896e6fa2391ed09f382a95b4f7480e6e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RestoreLastError
SetConsoleCursor
MoveFileExA
FreeLibraryAndExitThread
GenerateConsoleCtrlEvent
DebugBreakProcess
VerSetConditionMask
OpenMutexW
CreateThread
GetNumberOfConsoleFonts
InterlockedPushEntrySList

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE