5f084cb83b2e5523855209b3eaa50528_JaffaCakes118 | Triage

Sharing

General

Target

5f084cb83b2e5523855209b3eaa50528_JaffaCakes118
Size

86KB
MD5

5f084cb83b2e5523855209b3eaa50528
SHA1

45a1467b364e5e6bc1ea658e9b2a17e1e111f387
SHA256

ad2079ee97331875103128be0852bbfb41b3fc0b98091d7c4c9848d3be22d23f
SHA512

40303db588bb12d588374ee22f92edd9d1095711a4250cf02d04e948b06eeca459fd131ef690342bb41a69de93181bbf1b613e8b9e66c2aed5478ec2f31a179e
SSDEEP

1536:/AQHFokdpg8NFI0JqETGXgpMayUIJhOFhmNf1BnJNP7dcf7T61s5Varlj:/JHFr8uFMETGXgpFlIJhTNf1Njdw7T2d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f084cb83b2e5523855209b3eaa50528_JaffaCakes118

Files

5f084cb83b2e5523855209b3eaa50528_JaffaCakes118
.exe windows:4 windows x86 arch:x86

41332371a05888a079917109482c3623

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsSetValue
OpenFileMappingA
GetFullPathNameW
InterlockedDecrement
SetFilePointerEx
SleepEx
SetFileAttributesA
FormatMessageA
QueryPerformanceFrequency
OpenConsoleW
InvalidateConsoleDIBits

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xrdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE