12207a557b8c3bcda01c513c95216d90_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12207a557b8c3bcda01c513c95216d90_JaffaCakes118
Size

62KB
MD5

12207a557b8c3bcda01c513c95216d90
SHA1

1d7e01ed6ce6b01dc3920bcd6cd67931568fc899
SHA256

28dfaf58592810d0b997c84886d49a398eb41551c87ff48dfc2c53d76993cf99
SHA512

0acbb0adb930a594c6a8a77732de593452627cbabbd528941c1e7b1dafa836672a193435bb0f7a7737c480d869a6d152e4b29aec9f7b0f03cc996186b09c7d11
SSDEEP

1536:50QVf60sstQxUfCYHNqpw5hbsjOo18T9t9m:500sfcC7K5+Oo1yD9m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12207a557b8c3bcda01c513c95216d90_JaffaCakes118

Files

12207a557b8c3bcda01c513c95216d90_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8161b4ebeedc0b2af908322c939c1c61

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetHandleCount
SetComputerNameExW
GetConsoleAliasA
CommConfigDialogW
CancelIo
GetDiskFreeSpaceA
QueryMemoryResourceNotification
WriteConsoleOutputAttribute
CreateDirectoryExW
lstrlen
LocalCompact

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE