4246f5fdf43344209c4369009961ff42_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4246f5fdf43344209c4369009961ff42_JaffaCakes118
Size

119KB
MD5

4246f5fdf43344209c4369009961ff42
SHA1

9856b98935975ff1f06e25ab772464d0843a0418
SHA256

ea97cc9dbdbc53971b62a9ee016cfb7541d59c69feea59facfba471f58fb84aa
SHA512

c078e2e3159739b2d5293f108cc1381b568c3e6192fec1391134dc47447678050dd043137f61f36c11c1868a2a6a26a88d34aa68c4d4bf09216c867be22b1359
SSDEEP

1536:8WbaTy9lgPGaIucDpeb7KofanE8wlW1sY3YigpjVrs2ryrd1vUQuqSSqK5tnCvv:FZbhtu1evbstHs2qxnC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4246f5fdf43344209c4369009961ff42_JaffaCakes118

Files

4246f5fdf43344209c4369009961ff42_JaffaCakes118
.exe windows:4 windows x86 arch:x86

31c7bcda581caf37b153f7b42ba7075f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LZSeek
FindNextFileW
LZInit
RtlUnwind
SetMessageWaitingIndicator
GetDevicePowerState
SetTapeParameters
GetConsoleCommandHistoryLengthA
GetBinaryType
SetThreadExecutionState
SetVolumeLabelW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 63KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE