5c10d34649ece6ea208c6b11246c63b0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c10d34649ece6ea208c6b11246c63b0_JaffaCakes118
Size

66KB
MD5

5c10d34649ece6ea208c6b11246c63b0
SHA1

29ed1e494ef228346583c980b970ae8a72658420
SHA256

773cd5b35c9ad1f38e4d832bbbdf4100c80a8bd0b51301511440b0e8ec1e534b
SHA512

295d331ca20f066d6afe26460ed0ac0ef8f1013e526b06ec1715ab70fd4fd5fde216fe0fc1952d1c0d6b24c52982ebd6957435a08861aea0c06ccc0335a9de5c
SSDEEP

1536:2QZA3PKLOzxod3OA5gyO8rDMHelKHKmg+yHqcYer:MWv1O6AelKyXHCe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c10d34649ece6ea208c6b11246c63b0_JaffaCakes118

Files

5c10d34649ece6ea208c6b11246c63b0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c3dcac6b1a2799f5315a4de1a30d16a9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RegisterConsoleIME
BackupRead
DisableThreadLibraryCalls
OpenFileMappingA
CreateFiberEx
GetLocaleInfoW
SetFileAttributesA
GetSystemWindowsDirectoryW
FlushViewOfFile
GetShortPathNameW
VDMConsoleOperation

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE