2aa0dff6f4c3026522050caea776d2c8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2aa0dff6f4c3026522050caea776d2c8_JaffaCakes118
Size

56KB
MD5

2aa0dff6f4c3026522050caea776d2c8
SHA1

6b8f51591031deb70dfee5f57475f965679af3a7
SHA256

619cd8ce325552f3a700793301fb065b478d5ad58f6daf907afe523fb637457b
SHA512

059b51948cd6d17d075ad5b0b75c22be04e8ee7ed5d7268926fc10e3e0a3135b401911a64b85adcf5ceb3151f88dc28a5a3e2372ef9630191c8fcdf9d8e8471e
SSDEEP

1536:VQLZfsJwChqDhkv9p5AyFDufpLA9SpqQqGxRsYH0pQVPcp/RzX:VU0wChqDqvPCyFD6A9DQqGwBQVPO1X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2aa0dff6f4c3026522050caea776d2c8_JaffaCakes118

Files

2aa0dff6f4c3026522050caea776d2c8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

55f164eab456e01848e6ca473e60478a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceExW
GetConsoleAliasesLengthW
GetLastError
DosDateTimeToFileTime
QueryDepthSList
LocalSize
GetMailslotInfo
GetExpandedNameW
GetProfileStringW
GetSystemDirectoryA
GetConsoleTitleW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE