5aef24eb4496ad5cfe4dfa481f6f58a3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5aef24eb4496ad5cfe4dfa481f6f58a3_JaffaCakes118
Size

62KB
MD5

5aef24eb4496ad5cfe4dfa481f6f58a3
SHA1

b1a34912516aa6aa6dad32cd66d76f4e5a5e0617
SHA256

c2eddc36779fc7d1bd58b33d512cbad9a14a531b122f26c1e2dc679bc75a001e
SHA512

07fa9df1d7644dbf98c94146ad180aa56ca860c8b7fc344161462cd244347b2ce607daafdf261a44abaee814da88dcaeaabe9c8a0d8dfeca31480f22af58cd51
SSDEEP

768:EI2Q/meWiAN5JX6n3EqohpMMwJsiimO7wMuXz80Qz3scFFk2q+zCCgfn8muU4mxu:Es/eUueck/Q8crX9mCu9X4m+5KEUoH5V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5aef24eb4496ad5cfe4dfa481f6f58a3_JaffaCakes118

Files

5aef24eb4496ad5cfe4dfa481f6f58a3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5d13ec63c5b6bcd4a9081e28b8b461ab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeEnvironmentStringsA
GetEnvironmentStrings
MultiByteToWideChar
GetUserDefaultUILanguage
TerminateJobObject
ExitVDM
FindNextVolumeA
ConnectNamedPipe
CreateEventA
GetLongPathNameW
GetAtomNameW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE