5b28d4dece6f7dc785ab70175baa2dc9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b28d4dece6f7dc785ab70175baa2dc9_JaffaCakes118
Size

86KB
MD5

5b28d4dece6f7dc785ab70175baa2dc9
SHA1

ea9ca39aedf0bbf511c30107651ae0ed2f7f1250
SHA256

924a769585a7d49f7837ba33c8a312d3cc6baece79e75ac49b8763c21a81df2b
SHA512

573159ea25266e9bb06ae773b073a5cd807fc82cb71e5919faf1656a98a0d41004a7f922e787409858c145c68d8196da67373ff114602812cccf79b530721437
SSDEEP

1536:LGFxxEHYegLN9XWQMxIaJQDDcDayxNf1BnJNP7dcf7T61s5Varlj:L4DN9XWPxIaJQ0DLxNf1Njdw7T2cVart

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b28d4dece6f7dc785ab70175baa2dc9_JaffaCakes118

Files

5b28d4dece6f7dc785ab70175baa2dc9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d36d3c8d1b845f23e53899cb8f6bc9d2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringW
QueryActCtxW
FindFirstChangeNotificationW
GetDateFormatW
IsSystemResumeAutomatic
MapUserPhysicalPagesScatter
QueryDosDeviceW
DecodePointer
LockFile
FillConsoleOutputCharacterA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xrdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE