4c5e786d4931b8a769ab5ee123e37571_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c5e786d4931b8a769ab5ee123e37571_JaffaCakes118
Size

62KB
MD5

4c5e786d4931b8a769ab5ee123e37571
SHA1

83f63f9229927c22e15d38df62054221fb17cf58
SHA256

7aad21edac6fd5ed9fb5ccf41a72bcefee925553f545d2d51a26e0d04c89939e
SHA512

971b83239b400e875e9a9c88b24f698bb48b7de2506beae8a2fbd6441c62ea3a77906505279979dc300d285842c51127cdd58a5e31a64bc629319ef0f27ef63c
SSDEEP

1536:7zRS3Gv2Nd98jcePnwdf2WZK19obAdZXnM9iRryCrnVikm2X:fUA2Ndk2ZKnXZJfrnVSW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c5e786d4931b8a769ab5ee123e37571_JaffaCakes118

Files

4c5e786d4931b8a769ab5ee123e37571_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e4b282c213b10ab12c8c902dec976d1d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDevicePowerState
ReadConsoleOutputA
AddVectoredExceptionHandler
SetSystemTime
GetCurrentThreadId
ReadFile
MoveFileWithProgressA
AddAtomA
CreateRemoteThread
HeapQueryTagW
SizeofResource

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE