156f790509f611bb50f9cee065070a5b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

156f790509f611bb50f9cee065070a5b_JaffaCakes118
Size

56KB
MD5

156f790509f611bb50f9cee065070a5b
SHA1

549180d5a12db9ba30f35ebff6e5775d0f1cd1a6
SHA256

c7c25567bd786e6944a558ac3a9f4b2874ca90f28ff2d4c06f8abef9e7451d89
SHA512

36dd3b6175b5df232563f095b73910af2c95d69f1f73aa3ba011fc345fa3b16fb71dce2d066f2c781555971b996eb381482b7e8762bd76d0e9e441f1af539331
SSDEEP

768:mGFDHRGymiNMfa5NM0HQdy0f09PXlynCc7UbwW3X8hhcdPNvMfcqJ+kg/wYKSWet:mA1iSM57evlynX7UbwvOvr4YKpMkJsd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
156f790509f611bb50f9cee065070a5b_JaffaCakes118

Files

156f790509f611bb50f9cee065070a5b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

428b2d4dae0ac068c4d3f079e4c84a05

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Module32Next
SetFirmwareEnvironmentVariableA
_hread
GetFileAttributesA
GetPrivateProfileSectionNamesW
LeaveCriticalSection
GetCommState
CmdBatNotification
WriteConsoleOutputAttribute
SetVolumeMountPointA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE