459e33a1e3349c4b3cfa6c795c004b7a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

459e33a1e3349c4b3cfa6c795c004b7a_JaffaCakes118
Size

63KB
MD5

459e33a1e3349c4b3cfa6c795c004b7a
SHA1

c5f60db4805d88abfc331e05e48fba96d8c152a9
SHA256

bb39cda29e4ae066535fa9e77b9ac7161f6505e312e7278644826b62575fce4d
SHA512

7234d14501e45267ebad111d53d0fbb73f74522b9984d8e5242b824e9ac898729a8bfde611d9d8063f2248af267097514cb47f8db97e6943501a8a31ab1fdeaf
SSDEEP

1536:T8+wt4gKM5SAdXYLXBkQo6OZXXdiHn5nZcgc1h:sJXYU9/In5n2gc1h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
459e33a1e3349c4b3cfa6c795c004b7a_JaffaCakes118

Files

459e33a1e3349c4b3cfa6c795c004b7a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1f720e2b7c7065b68fa326a1e8f8ec07

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SearchPathA
ReadConsoleOutputW
WritePrivateProfileStringW
SetDllDirectoryW
WriteConsoleInputVDMA
GetNumberOfConsoleInputEvents
SetHandleInformation
GetDiskFreeSpaceExW
GetNumaProcessorMap
WTSGetActiveConsoleSessionId

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 48KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE