1450e969385e0f6b3423263dc84f3ee5_JaffaCakes118 | Triage

Sharing

General

Target

1450e969385e0f6b3423263dc84f3ee5_JaffaCakes118
Size

83KB
MD5

1450e969385e0f6b3423263dc84f3ee5
SHA1

7aaf3895ac905b23facdc2182c634ea8a807f55d
SHA256

e356b3da533b3cc606c463111060ced4864a9977920c6bbc4cfad9f7739aa9d2
SHA512

542767516cc7f731403e57b5920e0a272edaa78acce6adf239609dcef29d12f9be08b07776f01609015649ad7cbc4deaa230bb147fdb1c419f26c23657e2a19d
SSDEEP

1536:kSk5cjKpbS+S6tEN/NQjftY4YoX7ZpjVrs2ryrd1vUQuqKsw:fk5OKcgENlt4YA7ZHs2qm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1450e969385e0f6b3423263dc84f3ee5_JaffaCakes118

Files

1450e969385e0f6b3423263dc84f3ee5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

46a6830a0e594dd64ea7ca8c06a58034

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStringTypeA
SetConsoleCommandHistoryMode
CreateNlsSecurityDescriptor
WinExec
GetTickCount
GetStdHandle
CancelIo
SetDefaultCommConfigW
NumaVirtualQueryNode
ReadConsoleOutputW
GetComputerNameW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE