050e0042fc010fb553eacffbbb7f79e7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

050e0042fc010fb553eacffbbb7f79e7_JaffaCakes118
Size

63KB
MD5

050e0042fc010fb553eacffbbb7f79e7
SHA1

b8616ffb30e76fefb31a276f9f2e951ff2030ea1
SHA256

695de4ea68c25ce8475e79d27400988bc23c5540a243c51a9a017c4d98659b1b
SHA512

752a66f0717a62eb7ea7b011e6e2ce3fcc592810f6ac46a82df23856f80a152d217eec626411b7f2f43590309b1f9ff736b98dacfc656a603c8507cd6ab30f53
SSDEEP

768:d3Oz3eYXr6whiXNDI6YZ9uhgHD7TzqYLzOw2V+BUJ48L38fMwjINKSKqg6qjwRMl:d1NDcbjZ2ViUZoEwYwq1qEyAsvhpoRaB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
050e0042fc010fb553eacffbbb7f79e7_JaffaCakes118

Files

050e0042fc010fb553eacffbbb7f79e7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ce650efa8254e5e550926144d662cce7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SearchPathA
FlushFileBuffers
WriteConsoleInputVDMA
ChangeTimerQueueTimer
GetPrivateProfileStringA
VerifyVersionInfoA
CloseProfileUserMapping
FlushInstructionCache
FatalAppExitW
GetConsoleMode

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE