5bbf366a10e92ebebff9cba7c7d9c9bc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5bbf366a10e92ebebff9cba7c7d9c9bc_JaffaCakes118
Size

71KB
MD5

5bbf366a10e92ebebff9cba7c7d9c9bc
SHA1

d4b5329ee3ac4616c4b10a2dd0149f8be1dff92f
SHA256

c6519ad443bc1204b8d3df7d188c28292e9fa83104755be26213c6cd4f204a52
SHA512

6a40a827c421a445e5f8b0c322b61771cc1de69766e3b02cce22eee6f2a9e2fbcb9df7b42f4109d059cd3e733402a12cc7b2079fc1654a3d0f3dce711ac64bda
SSDEEP

1536:FzcF8xUUIZJDFcDILJMeJ1pqB9TnqYl7CnfL6Q6nnSlOi:5W8x+ZJhBLvpqB9Tv7CfLJbx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5bbf366a10e92ebebff9cba7c7d9c9bc_JaffaCakes118

Files

5bbf366a10e92ebebff9cba7c7d9c9bc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

426cab6b03e614f12313dc0f5cd9d707

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetThreadExecutionState
QueryActCtxW
GetThreadSelectorEntry
ClearCommBreak
DebugSetProcessKillOnExit
lstrcatA
GetConsoleInputExeNameW
SetCalendarInfoA
DuplicateConsoleHandle
CloseProfileUserMapping

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 57KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE