2af6983bfbc60ed534ef773e4aac1366_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2af6983bfbc60ed534ef773e4aac1366_JaffaCakes118
Size

28KB
MD5

2af6983bfbc60ed534ef773e4aac1366
SHA1

8e8ce20f1cc4fb3040944d4aabdff8333b88e525
SHA256

dff8cf3466621205212622ba2bc2dd1fbedfc24a8fac989e3beca366be4a8a57
SHA512

0ad0b848a954af9a29b6efcb6548e3699fd2947649fb179f667b53698e99f9117a4fd1725a89b7252b1d8f505555a79310fb60d1fbc7e5e48dd1b0153ee31f39
SSDEEP

768:hypQYZWSnxHzF6ZmLT7klhCp8/ObrmW51:hy2o3nJzsQiCp8/aKo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2af6983bfbc60ed534ef773e4aac1366_JaffaCakes118

Files

2af6983bfbc60ed534ef773e4aac1366_JaffaCakes118
.exe windows:1 windows x86 arch:x86

de34b062add334eb1c1c806e544d727d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetCurrentDirectoryA
FindFirstChangeNotificationW
GetConsoleCommandHistoryLengthA
SetThreadIdealProcessor
VirtualAlloc
FlushFileBuffers
_llseek
FatalExit
ReadConsoleOutputCharacterA
GetSystemWindowsDirectoryA
VirtualAlloc
HeapUnlock
VirtualAlloc
MoveFileWithProgressW

gdi32

RemoveFontResourceW

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ