285441db7788cfe00105ff121f06bf89_JaffaCakes118 | Triage

Sharing

General

Target

285441db7788cfe00105ff121f06bf89_JaffaCakes118
Size

116KB
MD5

285441db7788cfe00105ff121f06bf89
SHA1

c6d4fde10cbc9623c177de97d0a9cc226906b653
SHA256

1dd47e5f849528ce1d915fa040f1a94a3e1602cc2c4c4d79fc4a67067342146d
SHA512

e69710ca0bec80913049777613cc85b2caf8dccc6e41262f356689b3f60fd283a2e6ec6a504cdfb6ecacef3067596bebb6106a1409a79b8e4cc08803460f57e9
SSDEEP

3072:xMpFNMKSvBbQKL+EoCVHbFjGv1SHvDdKhkz:EMKSvBbQ0rvVHlGvYHJE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
285441db7788cfe00105ff121f06bf89_JaffaCakes118

Files

285441db7788cfe00105ff121f06bf89_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7fb950f30f6d99e1c23178df7955ab56

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalLock
GetConsoleAliasA
BeginUpdateResourceW
GetFileInformationByHandle
GetNumberFormatW
LocalReAlloc
DefineDosDeviceW
UpdateResourceW
OpenWaitableTimerW
SetConsoleInputExeNameA
SetConsoleKeyShortcuts
FindFirstFileW
OpenFile
UnlockFileEx
WritePrivateProfileStringA
ResetEvent
GetProcessAffinityMask
DeleteFiber
SetCommTimeouts
FormatMessageA
WritePrivateProfileStringW
GetPrivateProfileSectionA
GetPrivateProfileStringA
EnumSystemLanguageGroupsA
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.code
Size: 4KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ