414b29099937b77074c428c716de6892_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

414b29099937b77074c428c716de6892_JaffaCakes118
Size

64KB
MD5

414b29099937b77074c428c716de6892
SHA1

21b9b12ab7e8b71dace5a8b25df17c506f1f55f3
SHA256

04bc264f0f0b2ef8de84240b3e8e1cbfe088a01109924001131545077a5b5e41
SHA512

07b314ae8e72a9111b8a6addf09a999d2426f79a27216ab8669a7307fa1d749700db6cefe2bf9b3f78c05c1ee4add0a3b7e775c9e32c7e5ff1759df1e99554e3
SSDEEP

1536:kNYYmc41TGUHMAzBrxDHAsPnHT6jkDybZ83Yau:Z91oUVAsPzseylKYJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
414b29099937b77074c428c716de6892_JaffaCakes118

Files

414b29099937b77074c428c716de6892_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7b72343a7c2f733829a548f2c39bbad4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleMode
GetNumaProcessorNode
GetConsoleCommandHistoryLengthA
GetNumberOfConsoleMouseButtons
ScrollConsoleScreenBufferA
IsBadStringPtrA
lstrcmpi
SetConsoleKeyShortcuts
SystemTimeToTzSpecificLocalTime

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 36KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE