5ead7ec041dc45cec10e6af0f8bb6f3b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ead7ec041dc45cec10e6af0f8bb6f3b_JaffaCakes118
Size

62KB
MD5

5ead7ec041dc45cec10e6af0f8bb6f3b
SHA1

d06007dbdba500b33574314cc90d70d2bce77768
SHA256

c90b23ef2349e00706d728435bf09c01472493789f811f77c2b168f266ed538d
SHA512

051a321dcd3274287198fd87c1ec8fd143791220b7d65a0e4c385b575108902fd9d5712b37a0f971ecdbec4a60d71d60672077de5532b71da3e7dbc035088137
SSDEEP

1536:U7pj5GZ0Ax3sqW88pZSaJrbnobrizXtwyE:UVjwaqWBZSah1zXG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ead7ec041dc45cec10e6af0f8bb6f3b_JaffaCakes118

Files

5ead7ec041dc45cec10e6af0f8bb6f3b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4b1d59cdd572bafeccb8d87bb8b15725

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetThreadContext
GetConsoleCommandHistoryLengthA
CreateJobObjectW
GetCurrentThreadId
EnterCriticalSection
SetInformationJobObject
SetStdHandle
LockFile
GetCurrentConsoleFont
Heap32First
ExtendVirtualBuffer

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE