05fb1012e57a0056c0dc61e7b18ccd78_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

05fb1012e57a0056c0dc61e7b18ccd78_JaffaCakes118
Size

57KB
MD5

05fb1012e57a0056c0dc61e7b18ccd78
SHA1

5b885aee5adfd8e169f58974db8896a579158c61
SHA256

d07cab212a3ef907a53255288f8794ddb83e52d9a35ebf7e18396f1b75c224cb
SHA512

f471c795c32d7697fedd458f8eb1777bd64663445c5704c7fb51763695a07b2c2e9d1cc671e466e5a32f7a9ccfd56a2c8d429d51eab195109be18b149e62eaff
SSDEEP

1536:xs5SyU2cP24m2V0aUh1ZdJIw/nlbrPqtVB2fFhUZ8:xsMtP24m2V1wXdagn4tX8Fa8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05fb1012e57a0056c0dc61e7b18ccd78_JaffaCakes118

Files

05fb1012e57a0056c0dc61e7b18ccd78_JaffaCakes118
.exe windows:4 windows x86 arch:x86

51ca7ddf9061cef2dd26b68754674d7e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CancelTimerQueueTimer
MapViewOfFileEx
GetNumberFormatW
SetProcessWorkingSetSize
QueryDosDeviceA
ReadConsoleOutputA
DisconnectNamedPipe
GetEnvironmentStrings
OpenEventA
GetUserDefaultLCID
FindNextFileA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE