5ec79546b80ac92bf286b265c3910d1d_JaffaCakes118 | Triage

Sharing

General

Target

5ec79546b80ac92bf286b265c3910d1d_JaffaCakes118
Size

52KB
MD5

5ec79546b80ac92bf286b265c3910d1d
SHA1

39825deec3d41ed7ecb26e7a3cc1524d9dfb0e9f
SHA256

11c99ae3e93739643e83bf6fbfb32825a9bacc57dc3da81624422c136acb1c69
SHA512

8e2859f159999058c3b77435a2589189dbb32755d9adf998f0709cd41218dcdb20b1273a61a305d2875cae2769b08421e1a118b98f6818cd992b4b2f613300dd
SSDEEP

384:KCnKvHjDMtXaKzd8QykxYgObYQ7ZiTwxB+qYD2AvK4IE2phhxtARIsXJK9rWUoNN:K9vDDM3KY0oZDY/Y5K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ec79546b80ac92bf286b265c3910d1d_JaffaCakes118

Files

5ec79546b80ac92bf286b265c3910d1d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

28b762d837f5ae1c27fb54f6a90d1eb3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetModuleHandleA
LoadLibraryA
FreeLibrary
VirtualProtectEx
ExitProcess

user32

IsZoomed
DestroyWindow

Exports

Exports

InitIxsneqqq
Ywwogwcg
AddPqkrhfhn
WriteFfgldsn

Sections

.text
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.nildata
Size: 1KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ