139dc4f048e82b1cc69f618ff8d5143d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

139dc4f048e82b1cc69f618ff8d5143d_JaffaCakes118
Size

403KB
MD5

139dc4f048e82b1cc69f618ff8d5143d
SHA1

9ecf5ae6f6c23f7fca48a00b60835006cee11285
SHA256

e47944d3d4568b5f83eb3a9534d4ba9ed02f08868819202c6544f73853d2e57d
SHA512

2ac77ea37a49dbd8bae81f15ac37029322c5e50d90b0da6672547fe861c6769b786b2ab180f8bf1231bea69c9383ccc2b0a16a5a5d710343db6eb787d819a22d
SSDEEP

12288:Y3dDfduhhuYflBLBLhT4eahSV6PC0IA1J:Y3dD8/uYfl9XEeiSVg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
139dc4f048e82b1cc69f618ff8d5143d_JaffaCakes118

Files

139dc4f048e82b1cc69f618ff8d5143d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

e0a76a51860457c726df54b907942e46

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleInputExeNameA
ExpungeConsoleCommandHistoryW
GetBinaryTypeA
SetCommState
VirtualProtect
WriteFileEx
GetConsoleHardwareState
SetProcessShutdownParameters
GetStartupInfoA

gdi32

Polyline
SetRelAbs
PtInRegion
TextOutA
GdiQueryTable

msvcrt

mblen
iswalpha
_wrmdir
__p__pgmptr
_wstat

Sections

.text
Size: 394KB - Virtual size: 394KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 571KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ