5cf189e4faf968a2e64121a301bf9d5d_JaffaCakes118 | Triage

Sharing

General

Target

5cf189e4faf968a2e64121a301bf9d5d_JaffaCakes118
Size

10KB
MD5

5cf189e4faf968a2e64121a301bf9d5d
SHA1

3ddb0a62779df3e15d8710c8826ea3619368a0cd
SHA256

743360c02deea2b67c784249ac3c085fed5369b9a15a21a907a6b140830a622f
SHA512

b165275c4536b478397c4b2dbe51b2c569c6c539792bbdef84dc606a152fa5db8ae1923550f416f8e4e4a6dd60b8e5358cb5a0a099979ecb71d3b83513c20b5e
SSDEEP

192:JepmFBweOyNuluNtnOrzEqP4c/2jXqvJrlQ143MR8u:zjweOyNuluNtnOrzNDuGZl78eu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5cf189e4faf968a2e64121a301bf9d5d_JaffaCakes118

Files

5cf189e4faf968a2e64121a301bf9d5d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

93fb31442769660c59e42c3f6260744d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetLastError
CloseHandle
WriteFile
CreateFileA
GetTempPathA
GetTickCount
HeapFree
GetProcAddress
HeapAlloc
GetProcessHeap

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 452B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ