0ff2df89e7248068349608d4af82b3c9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ff2df89e7248068349608d4af82b3c9_JaffaCakes118
Size

83KB
MD5

0ff2df89e7248068349608d4af82b3c9
SHA1

7cbd1cb847e8758329e00327729c7c9bd48a527a
SHA256

116eef26e1a9e9894d2f9f2b46cb20470a9bf2aecb5665b8f0b3497d17364d6a
SHA512

dadeed0fc9886b48a10e0647e45022f483f0c12fe021914bc1e0bd93a537b94b8881bedf37f1a7d360ed39ed60fe8ea505b314a956c747cb4b986261ac5dcd0e
SSDEEP

1536:mfvzocexQnBycrQJ2S3xWdwwoXnNMwqkkRz1E9O3jEErxTWDTMqhGKYIZTET8bDQ:uvz6xWBysQJ2S3xWSdM/H0ojBkMqhGKy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ff2df89e7248068349608d4af82b3c9_JaffaCakes118

Files

0ff2df89e7248068349608d4af82b3c9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bbac448e2692caacdb29c56ddf6bd88b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleDisplayMode
GetVolumePathNameA
RegisterWaitForSingleObject
WriteConsoleOutputA
SetEnvironmentVariableW
CommConfigDialogA
GetNumberOfConsoleMouseButtons
SetFileApisToANSI
SetConsoleCursorInfo

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE