5b70fa7b812f8f03c981430a1fedcf32_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b70fa7b812f8f03c981430a1fedcf32_JaffaCakes118
Size

56KB
MD5

5b70fa7b812f8f03c981430a1fedcf32
SHA1

b7caec8a0b8aaa7f15f20ce99cfb1b53084ddb76
SHA256

226250f4c3ff0405d831e47925eed5d10b077327fd2d2c3df22db5d4cca40055
SHA512

59999f17d49cee692df9d0eaf631edd775f42b30e697cc6579f2db7c9d956cd5a9d24b49b20607c9a52646062d6efd5996ca785a8da1aa68880c9917ee18208d
SSDEEP

1536:eaOqUvM+vg3vOSkoMJ/bvXTut4YTIGSxEbAZQd:ZZtyUGbocbYTkFK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b70fa7b812f8f03c981430a1fedcf32_JaffaCakes118

Files

5b70fa7b812f8f03c981430a1fedcf32_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6750fc9d6191470a63caa021df250d26

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MoveFileWithProgressW
VerifyConsoleIoHandle
GlobalUnlock
ContinueDebugEvent
NlsResetProcessLocale
GetHandleInformation
OpenWaitableTimerA
Heap32ListNext
GetLogicalDriveStringsA
HeapQueryTagW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE