9f0cd8c9824b459bce9d3678ff84bc93_JaffaCakes118 | Triage

Sharing

General

Target

9f0cd8c9824b459bce9d3678ff84bc93_JaffaCakes118
Size

124KB
MD5

9f0cd8c9824b459bce9d3678ff84bc93
SHA1

8d24537b34491ecbc12a82cb2b412987293ce698
SHA256

02eaa5e29279d485a7e8daa004f9ea8553d74fc4bb69b175835c4731f45a9664
SHA512

16bfbf1f4fbafce0c7ebe963c1b3aae7ae280c4c688008bbd56b565f408c0245968ddead16ed77db7da055b7a4ef146e456dbe23eb4dbeb529ec7982de07ec97
SSDEEP

1536:HKVTjNRhrTRN86o9cEyaVSH2wuM3lWEfD82WtaQBD9kSjo/pdM0sjFjJaitASOHG:qVdH7o9cEiislWEojtaC7jd0kNXy6YG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
9f0cd8c9824b459bce9d3678ff84bc93_JaffaCakes118

Files

9f0cd8c9824b459bce9d3678ff84bc93_JaffaCakes118
.exe windows:4 windows x86 arch:x86

11b456f65b9c1dc8433471032c06e09e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReleaseSemaphore
DisconnectNamedPipe
EnumSystemCodePagesA
GetConsoleScreenBufferInfo
SetLocaleInfoA
SetLastConsoleEventActive
UnlockFileEx
GetConsoleCommandHistoryA
EnterCriticalSection
GetVersion
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 624B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ