14fdb475dc5b6768ed9f9388f238ff26_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14fdb475dc5b6768ed9f9388f238ff26_JaffaCakes118
Size

64KB
MD5

14fdb475dc5b6768ed9f9388f238ff26
SHA1

211b54f7d8a3663682411b4f8285a2b6e39c14d7
SHA256

a92d8de2fc3d284fd1f2753e1fcaf43c8ffcd66743a2c281d32d329c6863e3df
SHA512

ca240efbe0f0626d02487590f6b39bf357e1fa04e2569451aafe159139e9c3bbd98a67804bd37ce6bf398ad8346a85a9b741e77e9f93b2b5b1bdbd5e5ad5a3d1
SSDEEP

1536:m/yAJa6+9kd4fnOHblcytpy9CGX2ddhx9ys8UPzDsij:mywUuSS89Cychxcs/Pzgo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14fdb475dc5b6768ed9f9388f238ff26_JaffaCakes118

Files

14fdb475dc5b6768ed9f9388f238ff26_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c017c7ac0447fe7e5429f3b41f889b93

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDateFormatA
IsBadReadPtr
QueryPerformanceFrequency
SetCalendarInfoA
RequestDeviceWakeup
GetConsoleAliasExesA
GetConsoleMode
DeleteVolumeMountPointA
GetDriveTypeW
SetStdHandle
GetComputerNameA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE