5cf88ed047f6126257c58f1f0a95289a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5cf88ed047f6126257c58f1f0a95289a_JaffaCakes118
Size

116KB
MD5

5cf88ed047f6126257c58f1f0a95289a
SHA1

214c59c99732de3cd028ea767b93aef69d5fbc40
SHA256

809e1cdf63b13107dfa47b6eb18a6aa1cd6ee5d0ee37468d9a8d89148adcb8f0
SHA512

25d2f1ba286ea0c273cf51d0447158597142876cd87c2ea03c64add5188f6061b88e75b9a1ccb71a19c6c396cec7a8bb9afc078a9b5e7f4376a77e84125a6a45
SSDEEP

1536:UJZJAoc1aPt7KXjorcHp8QBo9mwnmv87O/Bsv3TXKAtTa1iDo62UzxaRhY:+JAoc1kq/pfGLnsaO/BWXKAE14o6R1k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5cf88ed047f6126257c58f1f0a95289a_JaffaCakes118

Files

5cf88ed047f6126257c58f1f0a95289a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3958e0ed6a0d4191e19e8dd6c5c0416b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetOEMCP
VirtualFree
Sleep
ExitProcess

user32

GetDesktopWindow

Sections

.text
Size: 512B - Virtual size: 238B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Hsug. Jx
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Ldbpdxie
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Hdqmfwlc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 233B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ