5d3fdc36fb89d80559ca78b39bff4dcc_JaffaCakes118 | Triage

Sharing

General

Target

5d3fdc36fb89d80559ca78b39bff4dcc_JaffaCakes118
Size

43KB
MD5

5d3fdc36fb89d80559ca78b39bff4dcc
SHA1

d92d87872555148422316da82809a6032ca659f5
SHA256

ad0376a81bc2ff35bbaaa02e1c8d4af1232dff0c3bd288c0264098b76057f0e6
SHA512

b7fe8bbfeecdacef96280c7cf5264cb97a12a57e5c1d02bccdbf158789cd061fb4bd1d527ee4cf376e1e3778f51f6efb80f281b76c090799b5420f6c35bcf1e1
SSDEEP

768:pzVRbuUWjvtYMAVfLmbCZflrf9cHgX/SiP3S2+xA53n:PIUGAVCwf9cA/SmCVG5n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d3fdc36fb89d80559ca78b39bff4dcc_JaffaCakes118

Files

5d3fdc36fb89d80559ca78b39bff4dcc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7692825bde957e30e1afa8ea6015fc52

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FillConsoleOutputCharacterW
LocalReAlloc
WaitForMultipleObjects
PrivMoveFileIdentityW
lstrlen
VirtualProtectEx
GetMailslotInfo
GetConsoleTitleA
IsBadHugeReadPtr
EnterCriticalSection
LoadLibraryExA
GetProcAddress
WritePrivateProfileStringW
SetConsoleInputExeNameA
VirtualFree
GetFileAttributesExA
FillConsoleOutputAttribute
LoadLibraryA
UpdateResourceW
FindNextFileA
GetCurrentProcess
QueryDosDeviceW
GetLastError

user32

SetCapture

Sections

.text
Size: 4KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE