5b95f48e8c35934157da6668adc1cffb_JaffaCakes118 | Triage

Sharing

General

Target

5b95f48e8c35934157da6668adc1cffb_JaffaCakes118
Size

56KB
MD5

5b95f48e8c35934157da6668adc1cffb
SHA1

d8af13de1dbd950d39d85de97df023c843630bbf
SHA256

4d4025fda1004ebc93055a3609fc56c6e0fb451fffd76af7d80e7201723e2869
SHA512

3719fff62e5f91ea448ecf902b9e00a36a38866d11189b520faf1b6c2ae3ad8cba3c6ee0733d37b355d35236c0854ab568f935cc67f3f722217729eeab5bd3a9
SSDEEP

1536:61IZUZb2Hb9wncb1p1fvvJDv6kn+gNbKaKYJOM1:6mZU6b9f1pF5Dv6knLzR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b95f48e8c35934157da6668adc1cffb_JaffaCakes118

Files

5b95f48e8c35934157da6668adc1cffb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

004617937e46ebedcab63be34f7d91d1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumLanguageGroupLocalesW
SetConsoleCursorMode
VirtualAllocEx
LocalReAlloc
ConvertFiberToThread
GetSystemTimes
SetCommTimeouts
SetConsoleTitleW
ValidateLCType
EnumDateFormatsExA
GetVersionExA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE