10ffb8043fe3420613f6727d148a831c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

10ffb8043fe3420613f6727d148a831c_JaffaCakes118
Size

24KB
MD5

10ffb8043fe3420613f6727d148a831c
SHA1

2c0ac2cd1ac1a86ae7ca2ebec884461ac7af9145
SHA256

a2d23d65577d1d7d605fcc2c6accdaa278eac1c2ddaab6f817dfb41ccb21f052
SHA512

ece779ec710770fca0549a7732ebe7e9429640991e2c1114e07b551bbc172b8207c3e5bfa8b872400eef9bfdafe34c60cd4131b1e01278058c549663728000f0
SSDEEP

768:KBPDsB1CWlwd7nio9bv/6oEUM7bhF4SAsQ90+XYnlMWA6:Na5FEUMvhOcQ90Xl7A6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10ffb8043fe3420613f6727d148a831c_JaffaCakes118

Files

10ffb8043fe3420613f6727d148a831c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f7bdeea7578b582c861b4696aa34360b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleDisplayMode
GetQueuedCompletionStatus
GetPrivateProfileStringA
SetConsoleWindowInfo
WaitForSingleObjectEx
GetVersionExW
WriteConsoleInputA
MoveFileWithProgressA
EnumSystemCodePagesA
GetUserDefaultUILanguage

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE