5a30d8d30c58703267585e1aa393087f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a30d8d30c58703267585e1aa393087f_JaffaCakes118
Size

62KB
MD5

5a30d8d30c58703267585e1aa393087f
SHA1

a304c9534668740304dfc4cd38276581f1787dd3
SHA256

17de604a17bc54005b54be77899a0b9d2f9b3af5909015dbbd7d32c071ca909a
SHA512

23dd35d843c79ed6df7c4daf636cea43b79d357b7db6938d242541cbfece1cc32c28f872e6141557ca6b0f465a45a5739bd0ea2f9d6ae8b9f6cd4474a8fce9ee
SSDEEP

1536:ac8/BLCpuodD8SLGjn9ShwmvKIP99db7v4s3:ab/BLXaD8sGjnAhwmyQR3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a30d8d30c58703267585e1aa393087f_JaffaCakes118

Files

5a30d8d30c58703267585e1aa393087f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

414ed9eaddae35d70ab1c021056c2405

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Process32FirstW
FreeResource
OpenWaitableTimerW
WriteProcessMemory
NlsResetProcessLocale
SetEnvironmentVariableW
GetConsoleCommandHistoryW
HeapSummary
RequestWakeupLatency
ReadConsoleA
RtlZeroMemory

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE