5c842e11073106de2ec675c63c464c31_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c842e11073106de2ec675c63c464c31_JaffaCakes118
Size

67KB
MD5

5c842e11073106de2ec675c63c464c31
SHA1

c9ec2574fcc0819202367cfb1bb90bcf8d88e1b1
SHA256

abfe0591fe2b5fdf38f4ef052ba1e47003895140f94fa7415832fabbad0e2e5b
SHA512

2cfd4ba339d25173aacb4e002199860df9a66703fd6144e1d700f967ec5a65620381e329743343cbf6712f6d382115e4a5b2ec3d0bb141384858ee9d9dbf25c7
SSDEEP

1536:JStgeQA3Q+07wrgtGZndxFsq9NjIqoItt0NlSEm4K:JStVg/wEtGZdxyq9VIqoItWVm4K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c842e11073106de2ec675c63c464c31_JaffaCakes118

Files

5c842e11073106de2ec675c63c464c31_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f22a235cadd5d5066bc4a8109525a4a7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpW
GetHandleContext
MapUserPhysicalPages
EnumLanguageGroupLocalesA
GetCurrencyFormatW
lstrcat
ReadFileEx
SetStdHandle
SetThreadIdealProcessor
Thread32Next
ReplaceFileA
GetProcessShutdownParameters

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 52KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE