5ef479d7974bea90df8f0c7863a5bb34_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ef479d7974bea90df8f0c7863a5bb34_JaffaCakes118
Size

136KB
MD5

5ef479d7974bea90df8f0c7863a5bb34
SHA1

2f6fcc41a6b5226b61734116ad03087d012082ca
SHA256

920b0cc722a6bf7a199cfffc31c42ca16d868a7713e6f6db1c8336618c8d5836
SHA512

63d9cd0c81f811b3921c579a9a36dcfbcedb966621b086726f3e705629b7bb0b3e6388e989e4c9f4d1c54f4473c1277625fb610f112854a55fda7b1845c180ee
SSDEEP

3072:KYKy5XEzZ+aBLyI6D1bcRlab+3baAo0YAqaRbfY07kyVmrEuM:Kd9l+aBeVD1Iq6OgYwpjVJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ef479d7974bea90df8f0c7863a5bb34_JaffaCakes118

Files

5ef479d7974bea90df8f0c7863a5bb34_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4ca1577ea827e7fe4d2ad166407efd2a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateThread
GetLocaleInfoA
CreateIoCompletionPort
GetStringTypeW
GetStringTypeA
GetConsoleMode
EnumResourceNamesW
RaiseException
HeapSize
ExitProcess
LCMapStringA
GetConsoleCP

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW

Sections

.text
Size: 93KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 492B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rscr
Size: 512B - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ