5a3ab06e0f30a86586adec6f42ddb1aa_JaffaCakes118 | Triage

Sharing

General

Target

5a3ab06e0f30a86586adec6f42ddb1aa_JaffaCakes118
Size

67KB
MD5

5a3ab06e0f30a86586adec6f42ddb1aa
SHA1

ad2bb84d0ea1d02db9f6a417421cd787e92114b8
SHA256

5d8a3654a1951d48b954d92e44e9e7f8c6b8d3fa567186d3e6781288268adf5e
SHA512

8fa010f8db6a6a6a7a50b3a507f3a266907a56245d890ac43ff6d7a31dbd208ad276238d15668e8c4a26a24f94719778230f2e401a1733d448d847f64c3349a4
SSDEEP

1536:pD9hBXB9PPFW+S4x0Xo+pj6NH1UoM660KO9GhLLv7Kj52ViCbi1y7IgA6MMSmI7I:pDjt5t0wfCFADkn6wvouJQamK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a3ab06e0f30a86586adec6f42ddb1aa_JaffaCakes118

Files

5a3ab06e0f30a86586adec6f42ddb1aa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ec2c432ea0fc4b575da9c3d88b7730f0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileStringA
GetConsoleCommandHistoryA
GetConsoleInputWaitHandle
CreateDirectoryExW
DuplicateConsoleHandle
SetEnvironmentVariableA
EnumResourceLanguagesW
WriteFile
Heap32First
GetLocalTime

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 52KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE