39a3f6973511e47c094d5b4a3b5f9b1d_JaffaCakes118 | Triage

Sharing

General

Target

39a3f6973511e47c094d5b4a3b5f9b1d_JaffaCakes118
Size

56KB
MD5

39a3f6973511e47c094d5b4a3b5f9b1d
SHA1

b2bbf14105a3d954cf9dd0d68ac704a5177c69ea
SHA256

3f1a69cf4d22bf7597814866cb5f2350174a61963ca3a093dea2652a2fce272d
SHA512

9b7b3876bab165ff40ce0d5dbee02928bc406eb0453ee78343cd42a597d9161f445148875c6b664e1899120679f84be3529f298e5f99c268c25dddf1e46731be
SSDEEP

1536:0xK0UdBsteaI+WoA3NvZyYyCW0IvsJOj4lsHBF5OjfKO:0zksoaIL1RKv5j4Y6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39a3f6973511e47c094d5b4a3b5f9b1d_JaffaCakes118

Files

39a3f6973511e47c094d5b4a3b5f9b1d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

29e638b1d333e05a24d211d274a63ea9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ConvertThreadToFiber
FileTimeToDosDateTime
GetConsoleCP
WriteFileEx
GetOverlappedResult
DosDateTimeToFileTime
GetMailslotInfo
GetNumberOfConsoleMouseButtons
CreateNlsSecurityDescriptor
EnumSystemLocalesW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE