5e2b95d2af2c56486d33caa57d699137_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5e2b95d2af2c56486d33caa57d699137_JaffaCakes118
Size

83KB
MD5

5e2b95d2af2c56486d33caa57d699137
SHA1

0925bd81e0bedae9ad1228b09d5bed3b6b03f22b
SHA256

51e188d70cf8bd67ad9c086213cbd452182112b35681f5fd4a8054254283866f
SHA512

91da7a53a33121209a8b0e5bd19b7eedadd649289bb02f3c893947e1dcae9dbbd5991ca342351b2e8ac83f999adceca410028a3d8a3b559297b99bf13be47983
SSDEEP

1536:8BWtr8AfrK4Cn7zEAbn8yr/0i03n84GtQPusU/edhZKz/U8ifiFj1:8YNeBX/n0MTWPu5ekTi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e2b95d2af2c56486d33caa57d699137_JaffaCakes118

Files

5e2b95d2af2c56486d33caa57d699137_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6a551b0c4090a47c026639531af8296b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedExchangeAdd
GetStartupInfoA
GlobalUnfix
ConnectNamedPipe
SignalObjectAndWait
SetFilePointerEx
FlushFileBuffers
LocalFree
SetComputerNameA
FindVolumeMountPointClose
EndUpdateResourceA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE