5c5713a07f1c7267c3c9eb9931702fbb_JaffaCakes118 | Triage

Sharing

General

Target

5c5713a07f1c7267c3c9eb9931702fbb_JaffaCakes118
Size

67KB
MD5

5c5713a07f1c7267c3c9eb9931702fbb
SHA1

c739cd33f3509808f6e2fa1abbb29a3faba5b613
SHA256

c51d3975fa447eb7bb918140a5f95f596e2cc181c74bcdddccd0e12ff7e4df51
SHA512

bfc4b1a4207665746fd782f6f9c062c1ad8744dbab31aa01808ed1ac2a880fc0561ef590211cc428ff950d96dd3dd9548c619aba7510a3730514fe77d6795d30
SSDEEP

1536:HlsrP8NyyIAwwuXYlsTpyhR+42pUI6VfUh3nZVkKmuK:HmP8kBDolAeRl4p6Zu3sKmuK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c5713a07f1c7267c3c9eb9931702fbb_JaffaCakes118

Files

5c5713a07f1c7267c3c9eb9931702fbb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

54c30b83c2b301fb633945d572be06ed

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
CommConfigDialogA
GlobalFindAtomW
GetExitCodeProcess
WriteProfileStringA
_lclose
ReadConsoleOutputA
Process32Next
ReadConsoleInputW
RemoveLocalAlternateComputerNameW
WriteConsoleOutputAttribute

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 52KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE