05cb5a5279c2244bd3f67accfa912383_JaffaCakes118 | Triage

Sharing

General

Target

05cb5a5279c2244bd3f67accfa912383_JaffaCakes118
Size

56KB
MD5

05cb5a5279c2244bd3f67accfa912383
SHA1

5ae747c531193fc7faf17cadc6aaa1b2e28f994a
SHA256

f1154eca8a1ee8f37123ba79ecc3d09fd08de55f19b79a939b6d7edc258458df
SHA512

9c90aa975b5d1b2bc39030d0c3506c2bfb783918daaf1e4c9c2ed529324d96576f77a2e318516b6efd67d9e4999feb1c66b0909144c40cb53e2db2d8f1068213
SSDEEP

1536:w0MQa66GChxRbGRKBDOKI2RjDg/VdD7851cFo/f:8ZBpI2RjD+dD7ho/f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05cb5a5279c2244bd3f67accfa912383_JaffaCakes118

Files

05cb5a5279c2244bd3f67accfa912383_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8bd2c2a24229d0533a9b2fd1c9ed7412

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetUserGeoID
GetSystemWow64DirectoryA
GetDiskFreeSpaceExW
EndUpdateResourceA
GetUserGeoID
DebugSetProcessKillOnExit
VirtualProtectEx
GetPrivateProfileStringA
CreateDirectoryExW
GetFullPathNameA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE