5e5720cfc89111b3cd26363c336daa2a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5e5720cfc89111b3cd26363c336daa2a_JaffaCakes118
Size

165KB
MD5

5e5720cfc89111b3cd26363c336daa2a
SHA1

e18fedc3c228b5e6498747e63f1ec0edb0c90560
SHA256

5b822136fee5b3ef6623b313c84dacbc3eb200e48b50f538754509b221e01e2a
SHA512

247fbcf3fd8d615e4c96c2d16e5a16304ae0a7823b636f7cd830a993c317b4cee41e192beb372594bb7287e41488833cafebc23fa1a72d6aa610ba72bcf299f7
SSDEEP

3072:fYfv6ShtnuhYZS0bwHQTR1Pgwk/9D2ki37oi3ynAN5pgm5mswQPcQUQt:gfdXZPRiNNNAPOm5bwEcf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e5720cfc89111b3cd26363c336daa2a_JaffaCakes118

Files

5e5720cfc89111b3cd26363c336daa2a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

53970d2d8bbba0cf6dab994f288af2ea

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
GetWindowsDirectoryA
GetCurrentProcess
GetCurrentThread
GetComputerNameA
GetStdHandle
GetCurrentProcessId
GetVersionExA
CreateEventA
CreateMutexA
GetModuleHandleA

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ