2651c88db942e8a1e9216fcfc87fc3ac_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2651c88db942e8a1e9216fcfc87fc3ac_JaffaCakes118
Size

71KB
MD5

2651c88db942e8a1e9216fcfc87fc3ac
SHA1

0b87b9779a2543087db9baa23bcf45b8ab481cf4
SHA256

b04ac476e8a47811c256dec58e4e9dca6c80733354b4b53764dd31de2e4c9bd6
SHA512

25fe861c1e5cf7d6dbf06545189500462a75bda66b4adf63228aa22bb0166497eb69ba39bc548a4a07861179c3b18097c9a3d6c93cc14b94a598c84d75912867
SSDEEP

1536:UC+/lNnTbi08xAAkHhus0fGisEaqIiJyrKj0dP7bFPC11m:JGlNTOE/0ppVbJyOgdXF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2651c88db942e8a1e9216fcfc87fc3ac_JaffaCakes118

Files

2651c88db942e8a1e9216fcfc87fc3ac_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a708508708bb1a9a20c684e806fb0825

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateVirtualBuffer
GlobalHandle
QueueUserWorkItem
DosDateTimeToFileTime
GetConsoleCursorInfo
CheckNameLegalDOS8Dot3A
LCMapStringA
SetMessageWaitingIndicator
EnumUILanguagesW
SetThreadExecutionState

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE