1307e2165e4206ad0946c00e2da20ae0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1307e2165e4206ad0946c00e2da20ae0_JaffaCakes118
Size

56KB
MD5

1307e2165e4206ad0946c00e2da20ae0
SHA1

fa6b98fe0715677f6d5fd739624f678d960fb079
SHA256

4089ae0f5c6555e5112893f480e94017b98072bb592a4291082c14f1cb5cce1d
SHA512

0f2a4a6792943bf362f30ca36de3fafca4972098b1fdae02df6fb3fb7f89a85f4c462cbdd826f2decc9b3230458af13916c6741d5a32481952a0ccb29138be65
SSDEEP

1536:CsIHKj9Dljg04eQ3QkmfZcPc4JQ9Cc6sKlCTHSDNXcUnCrfFz:SX+t4JQzpUnEN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1307e2165e4206ad0946c00e2da20ae0_JaffaCakes118

Files

1307e2165e4206ad0946c00e2da20ae0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

25243c6effee1caf506f9b084f7410cc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueueUserAPC
GetVolumePathNameA
QueueUserWorkItem
GlobalFlags
SetCommState
GetTimeFormatW
CopyLZFile
RegisterWaitForSingleObjectEx
FindActCtxSectionStringW
DuplicateHandle
GetConsoleTitleW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE