5aa7ce0ad6e2c155e8858bd8f42e3cf0_JaffaCakes118 | Triage

Sharing

General

Target

5aa7ce0ad6e2c155e8858bd8f42e3cf0_JaffaCakes118
Size

66KB
MD5

5aa7ce0ad6e2c155e8858bd8f42e3cf0
SHA1

3633c711556bcbebdf5a765ac0fb116f717dfce0
SHA256

75420f4a5ee0b3c4354995879e2d47a2826c833b1e08461dc8e0754fd58985a1
SHA512

690282e7f73693d4e927e472952b9f3c93959beebb9b10f2edf1b2e094fbe6c610e7d079c3e48aa347d30f88f7c7008baa59a9bbe8e39701b44fe3ffbcf23dcd
SSDEEP

1536:hz9QNdpIEiTC56zr+kll4f9NpE21PbU0SAn67UVO2UO7A0LVUNK75M:hwdpjEzSkb4f9LZPb7nYUVO2UO7A1NKS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5aa7ce0ad6e2c155e8858bd8f42e3cf0_JaffaCakes118

Files

5aa7ce0ad6e2c155e8858bd8f42e3cf0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

57308b30e0132d8c4b2f92bfe96ac8c1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMutexW
BaseQueryModuleData
AddConsoleAliasW
ReadProcessMemory
WaitForDebugEvent
ReadConsoleOutputAttribute
SetConsoleHardwareState
SetConsoleWindowInfo
GetNlsSectionName
GetCurrentConsoleFont

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE