5cbbe13d7e9d73d57077acf83934d236_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5cbbe13d7e9d73d57077acf83934d236_JaffaCakes118
Size

67KB
MD5

5cbbe13d7e9d73d57077acf83934d236
SHA1

89b714afdd6e04a59fded1b4f0c1258969b0e359
SHA256

c0a1e8a6fbb5049b733e22535357227f345871980a0efcc042631ace5b6ec2b8
SHA512

e2fcf1bc202e015ae43e56665d660325c50ce5311bece8633951d785d15429ad7cdce1ffd1bfd94a5229e97b021f43665c74f885010905ac8d2dfe628e5655ff
SSDEEP

1536:YusYDFmf2HJXDKGAzKc2FF38XyhG9elbuc7Kbba2MmS8G6pjfbu+K:dFm+HJNAzv23sChG9Aaccba21S8G6pWh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5cbbe13d7e9d73d57077acf83934d236_JaffaCakes118

Files

5cbbe13d7e9d73d57077acf83934d236_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5c7e092b7f336cc50e8b14daaf256b52

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempFileNameW
SetEnvironmentVariableA
HeapUsage
GetNumberOfConsoleFonts
ExtendVirtualBuffer
ReadConsoleInputW
_lread
ClearCommBreak
MapViewOfFileEx
CancelDeviceWakeupRequest
ZombifyActCtx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 52KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE