5cc7c136a3380dac4d191b926eedfe3c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5cc7c136a3380dac4d191b926eedfe3c_JaffaCakes118
Size

29KB
MD5

5cc7c136a3380dac4d191b926eedfe3c
SHA1

c37bb0876a024ed5964d74d10675ef2cd75d7173
SHA256

c3146cf3d88f19eac3d2a05c7725c92ab50c2ad88a70bdb033530b13de36b8e5
SHA512

7b073bd58cbbec2a8abaa0a086f658e97f67ac02c535cfb80b74d7dfb9b01993daa52cd5d04835bc56e1aa758ae38639f109f952da79a516db7dc0028d2fc2a1
SSDEEP

384:safAAKp/Q8H5p4/NQxAJQCKoJNz+aED4CVX40HnAjNA2n8yLaz8wiYsd7D3g:s8AAKpc/eNoJRBE140HU+GYsd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5cc7c136a3380dac4d191b926eedfe3c_JaffaCakes118

Files

5cc7c136a3380dac4d191b926eedfe3c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c0641db0659e555bfa6694e4f632f22d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BackupWrite
GetConsoleFontInfo
GetTapePosition
GlobalUnfix
FindNextVolumeMountPointA
GetAtomNameA
GetBinaryTypeA
EnumSystemLanguageGroupsW
CreateEventA
lstrcpynA
GetTapeStatus
GetProcessAffinityMask
GetProfileStringW
CreateTapePartition
lstrcmpi
EnumCalendarInfoExA
IsValidLanguageGroup
LoadLibraryExA
SetConsoleCursorInfo
OpenSemaphoreW
GetVolumePathNameW
RequestDeviceWakeup
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.code
Size: 4KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ