5c031aa1360afab8c61e59ea9fa9e901_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c031aa1360afab8c61e59ea9fa9e901_JaffaCakes118
Size

66KB
MD5

5c031aa1360afab8c61e59ea9fa9e901
SHA1

8b55d48dd64c38e9df31e47d6235e3cacbae2d39
SHA256

dffd6e00beaee1eb43315d5228b62263cc8f7c37aeb894fdc74619203995d9b2
SHA512

66a24d8498f9d9da8a4e4f939b1f67118793da3e399dd7989b7f997cb2bfc04ac4707e64fe1bdbff1fc2689e08f1d1863684d9d06f46d9675e4010df1ee2ec74
SSDEEP

1536:VpTrWxy0jYSKVWg+oLVBtMUMS4BmAn35JQBwYzwTsO:HmxylS4Wg+WRGvn33QRz8z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c031aa1360afab8c61e59ea9fa9e901_JaffaCakes118

Files

5c031aa1360afab8c61e59ea9fa9e901_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2d829d6fbea931009197a687096ff21d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleExW
GetStringTypeExA
HeapCompact
CreateTapePartition
UnregisterWait
GetVolumeNameForVolumeMountPointA
_lread
EnumerateLocalComputerNamesW
EncodePointer
TlsSetValue
EnumSystemLocalesA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE