5d4c9edda19f5e0f697e4ddd735d7601_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5d4c9edda19f5e0f697e4ddd735d7601_JaffaCakes118
Size

56KB
MD5

5d4c9edda19f5e0f697e4ddd735d7601
SHA1

b0dafd4a23dd7011a73a24903b203d8bfe746f7c
SHA256

275c53e25623345457d0209cb5b43c88a9ef45c37bf8ff882ec2f45942d44692
SHA512

2bce4da3c4eac369d8eab75b1a20ccd682a58e2060e2d5284e11019aef9ab9567e549ace11e9fbfff402e07c656ab6e49f9c89173fd23269459cbfbc2c4f069b
SSDEEP

1536:VJqGzjeQACkSPwycMX8Tuj1NVsqpwH+lDRiyIB:VJqMev3yvniqpwH+9RlIB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d4c9edda19f5e0f697e4ddd735d7601_JaffaCakes118

Files

5d4c9edda19f5e0f697e4ddd735d7601_JaffaCakes118
.exe windows:4 windows x86 arch:x86

01a22614ad2580b2425753ad4047881a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenJobObjectA
SetProcessAffinityMask
GetSystemTimes
SetCalendarInfoA
CreateJobObjectW
MultiByteToWideChar
GetTimeFormatW
GetNumaAvailableMemoryNode
CreateWaitableTimerW
CreateMutexA
FindFirstVolumeA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE