122f8276055b911f38a9c5f489caa6bf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

122f8276055b911f38a9c5f489caa6bf_JaffaCakes118
Size

80KB
MD5

122f8276055b911f38a9c5f489caa6bf
SHA1

398aced593fec4aa0a1bf892f74a56a751c8526a
SHA256

73c7414f3b7ed6e342bda3259dc7040fd7e32cc93f8b5dee1ebddb4cde18c2b0
SHA512

a6aa90475c7aa1f911fbfebd0a8ea01b4eb06ee884048d31ce9426d0d9e53932aabd0024704bfeb9ecbf2ce8a911572f39570cb9ffbc0fd347f48cf757291a22
SSDEEP

1536:10pzamBOx0t9p2z5YjJJFM1x82hW8fPL:10pOYzp2z5Y9A1x8vYL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
122f8276055b911f38a9c5f489caa6bf_JaffaCakes118

Files

122f8276055b911f38a9c5f489caa6bf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de80fecebf08b81410486cf8a96d5a50

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalCompact
ReadConsoleOutputA
SetConsoleInputExeNameA
ResetEvent
IsValidLanguageGroup
WriteProcessMemory
Heap32ListFirst
BuildCommDCBA
lstrcpyA
GetExpandedNameA
HeapCompact
GetCommState

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rrdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE