5bf8f4ac712b7a1bb81695137510224e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5bf8f4ac712b7a1bb81695137510224e_JaffaCakes118
Size

83KB
MD5

5bf8f4ac712b7a1bb81695137510224e
SHA1

657af4323b0daa8f380ad53a43478732ef3fb19d
SHA256

accc394afae57096fbd250622f09a962ad0049e062bd6110f820568f2fa63c0b
SHA512

c43ff750a719f614728a571f6c2b6436738abd8c59fab99d5b3c4172c2c720a11bc823f0242a46c5c95c561c2c9adf9be60fca69297e70b02e8a9d25cbc02f40
SSDEEP

1536:zeeR9s1nCWNcNcoFgMtiSTKHaiKBszvcsEZxuc9G9rFBNf1BnJNP7dcIf:CeR9s7oF+Krqcsmw9RBNf1Njdz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5bf8f4ac712b7a1bb81695137510224e_JaffaCakes118

Files

5bf8f4ac712b7a1bb81695137510224e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8b82ec12693697ce8d9ba921473a7055

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileSectionNamesW
RegisterWaitForSingleObjectEx
DefineDosDeviceA
GetConsoleInputExeNameW
OpenWaitableTimerW
OpenWaitableTimerA
VirtualQueryEx
OpenProfileUserMapping
BuildCommDCBA
GetConsoleAliasExesA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xrdata
Size: 27KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE