1850b5c10dc8c1453367e511b7ab89fa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1850b5c10dc8c1453367e511b7ab89fa_JaffaCakes118
Size

56KB
MD5

1850b5c10dc8c1453367e511b7ab89fa
SHA1

983ee1a7a84f7aae47a172ad706b5cf2b6d28015
SHA256

d9939e8c3d5c83b5e175e9440df703031bcb335bbd5e2604e0f82e619fdbdfd8
SHA512

2e7b1e20a792233e4014bd3470d5e6f27c0e447837135325dd7701806f0a49f94c285fa6e820c18eca8246dc3bc09d376bc0693540a4910a7bb022cb4436a9d1
SSDEEP

1536:8JQTuAnSLeGu8Qa+QqoBcbwy28DBtDAY3fy8RE0rWs:QQPSLeG9+7U0wy287DAf89

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1850b5c10dc8c1453367e511b7ab89fa_JaffaCakes118

Files

1850b5c10dc8c1453367e511b7ab89fa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9c82de2a051915da73b00cf8c2bb4a36

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleOutputCP
QueryPerformanceFrequency
LocalFlags
FreeConsole
UnregisterConsoleIME
MapUserPhysicalPages
FileTimeToDosDateTime
GetBinaryTypeW
GetPriorityClass
UnregisterConsoleIME
OpenProcess

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE