451b1ce64ad2ad88c635fa9f1c49a142_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

451b1ce64ad2ad88c635fa9f1c49a142_JaffaCakes118
Size

28KB
MD5

451b1ce64ad2ad88c635fa9f1c49a142
SHA1

e983fc71d776f181bf667fa26ccf757ccec16cf1
SHA256

74018e278eb6d543542acd2e98f68cd18f178fed478b772faa08a8954fc0bb56
SHA512

da75b4e6cef015ce5594c6e91cc2b6cd08d2b30634788115a558dff128dade006fa0b3ce25239e3b9e3b0076215a7e4e5334d70b124edc6b8d482b1c1fb38d5d
SSDEEP

384:kpf2CB4agusMqpSfDFjnOjpw7U8JHHkUv7xTl+Fct5VZtFvdkafp:SBBt1sMqUfDFjO9wIaEWpUCVZtfk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
451b1ce64ad2ad88c635fa9f1c49a142_JaffaCakes118

Files

451b1ce64ad2ad88c635fa9f1c49a142_JaffaCakes118
.exe windows:1 windows x86 arch:x86

29967e66cc8e72de85e51e475d0c97a4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

SetEnvironmentVariableA
GlobalFlags
AllocConsole
SetConsoleOutputCP
WriteConsoleOutputAttribute
VirtualAlloc
IsSystemResumeAutomatic
FindNextChangeNotification
_lclose
SetFileShortNameA
FlushConsoleInputBuffer
PurgeComm
GetProcessId

winspool.drv

DeletePrinterDriverA

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ