0d5c5fceead5e00ef4785fe17ad0ef9d_JaffaCakes118 | Triage

Sharing

General

Target

0d5c5fceead5e00ef4785fe17ad0ef9d_JaffaCakes118
Size

63KB
MD5

0d5c5fceead5e00ef4785fe17ad0ef9d
SHA1

2b954bccad5baf127a4264b7492dd203b763de46
SHA256

9ebe498d4baa702220a358c5084f426e3a97fbbd9ede3534e4067b87597dff43
SHA512

371d0c238f6aa06a928b3e84f145576325f11b6f7a05e2372ee6eea30df0847e2a1a8e5c14d66040790bb9c26c879c25235b3bf2f9e2f8001de780e29357d35b
SSDEEP

1536:7bCNenCxd9teM+N8fqy063vKpG2M/1Em774XY9Rh4W8:XC9XWGfVX3vKpG2Mj7cI9f4W8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d5c5fceead5e00ef4785fe17ad0ef9d_JaffaCakes118

Files

0d5c5fceead5e00ef4785fe17ad0ef9d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3bcc7ff007d3d8efc1b30ae7629429cc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateHardLinkA
VirtualAllocEx
EnumUILanguagesA
GetLastError
HeapLock
SetUserGeoID
GetConsoleAliasW
ReadConsoleOutputW
ResumeThread
CreateActCtxW
GetBinaryTypeA
GetStringTypeExW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE