405128ab3efe61ff0586dd559003e859_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

405128ab3efe61ff0586dd559003e859_JaffaCakes118
Size

56KB
MD5

405128ab3efe61ff0586dd559003e859
SHA1

503f33f92a7a3f68072d2858bb4ad631a2462e2f
SHA256

805246acf39a325f00b44d6fbb45d4f9614a7b1cfd1124f26985fd8827ed7031
SHA512

b94503beed32a205516cce2234d362a39c932b2499f330aeaee25ba2022399aa4efc6fa2ea5b8df25e1a61baf5a3acb5122291ffa7001efa8a1b9f4b81169226
SSDEEP

1536:5psRJ68Qaux7lmFQVd3zfs10f4pqA1FNTyDfHzG4:7k1yx7lDs10wpq0N+np

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
405128ab3efe61ff0586dd559003e859_JaffaCakes118

Files

405128ab3efe61ff0586dd559003e859_JaffaCakes118
.exe windows:4 windows x86 arch:x86

765570887c7dc75dce0d1dc457263466

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalWire
GetSystemInfo
SetComputerNameW
ConvertFiberToThread
HeapFree
EnumerateLocalComputerNamesA
CancelDeviceWakeupRequest
LZRead
WriteFile
InvalidateConsoleDIBits
SetPriorityClass

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE