279f9e15b8704fb7cd941a26a6e6f160_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

279f9e15b8704fb7cd941a26a6e6f160_JaffaCakes118
Size

96KB
MD5

279f9e15b8704fb7cd941a26a6e6f160
SHA1

96e3c5e0fd47347ff994e7206d8d21412c8c6913
SHA256

dbdbb0bcbf86951605ba187cfbce1280ef2c51ce6ebe9ab962d27e0aa4fcfe28
SHA512

938fe01346816aa6b60a048ec229d5de7d67dd888cbff45116eef4a73fe8cd3af7e16a7b6e960c920be741f367e6f8cb0d1f6f8a975f2a849a51556ba2848819
SSDEEP

1536:FodORKNPGjFS6TrQI5JqfFhJyM/Oqhby8VRIlT/jG4GS8QYx7Zgn5DpcG5:KIWWFhvpJqfbzOApRqT/qfS8jx7Zg5Dr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
279f9e15b8704fb7cd941a26a6e6f160_JaffaCakes118

Files

279f9e15b8704fb7cd941a26a6e6f160_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0f6de44c182a0b86da1776da748601e5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
CloseHandle
HeapWalk
FindFirstFileExA
GetFileInformationByHandle
GetSystemTime
SetConsoleScreenBufferSize
GetProcessVersion
LocalSize
EnumDateFormatsExA
GetThreadContext
SetFilePointerEx
QueryDosDeviceA
GetNumberOfConsoleInputEvents
EnumSystemLanguageGroupsA
GetCommandLineA
GetStartupInfoA
ExitProcess
FreeUserPhysicalPages
GetConsoleInputWaitHandle
IsValidLanguageGroup
FindVolumeClose
CreateThread
GetCurrentDirectoryA
WideCharToMultiByte

Sections

.itext
Size: 4KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

WEIJUNLI
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA