5c50bab86dcbc0bd2e7dfb9adba98aa1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c50bab86dcbc0bd2e7dfb9adba98aa1_JaffaCakes118
Size

62KB
MD5

5c50bab86dcbc0bd2e7dfb9adba98aa1
SHA1

0ee395d3022a192ebcb79ba4d7e65891483cc967
SHA256

f129387fe12e647804fb3642e74aa8a9abeddd6ba032d4908a1da906067895f3
SHA512

0e3239662f89b07b30e997fd7e3474a9c76137c98db85d7cea663f54ef5c38049c18086b5012afdec047b57b8a6253854430df7b1915f7d5961278254b0a5dbe
SSDEEP

1536:LGW5DfHMvvj/GB8lIDXOIoen/u/wtEg4OMWdfaAR1:LGsDfsv7uBA2XObN/anMAiAR1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c50bab86dcbc0bd2e7dfb9adba98aa1_JaffaCakes118

Files

5c50bab86dcbc0bd2e7dfb9adba98aa1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d15fd2d51d92e34c87c51ca796ea3e04

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetDefaultCommConfigA
FreeUserPhysicalPages
LCMapStringA
EnumTimeFormatsA
GetVersionExA
GetCPInfoExW
ScrollConsoleScreenBufferA
GetDateFormatA
GetDevicePowerState
GetConsoleSelectionInfo
CreateMemoryResourceNotification

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE