5f2e84d254a52ac43173d14ecea9b4f3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5f2e84d254a52ac43173d14ecea9b4f3_JaffaCakes118
Size

56KB
MD5

5f2e84d254a52ac43173d14ecea9b4f3
SHA1

71c0a692c1bcabfadc18a61e58160391e6f9b1e0
SHA256

79a7a7046ba3d31fca4bb6cebd3cddb6d52a0595732aac29964c8ef127f92d62
SHA512

7aa0d664d9aaae3c1540a2d15bc50f7101ec31468e272a0ee13bc067111f96d0c4a91d2b3f2a0a62fcc3187c0b152377c8dbfe87d0f6b32f13891e40f7f1aef3
SSDEEP

1536:mKlZhYjUu4Id9Kn6+lf9adoNJF6AoNqbM2gVN:xL2jj3Mn6+lfodoN4qoR3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f2e84d254a52ac43173d14ecea9b4f3_JaffaCakes118

Files

5f2e84d254a52ac43173d14ecea9b4f3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b95f420d53b6036ffccdb1d07613aeea

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemInfo
AddConsoleAliasW
CreateVirtualBuffer
LZStart
FindNextVolumeMountPointW
GetCalendarInfoA
VerSetConditionMask
ConsoleMenuControl
SetSystemTimeAdjustment
LocalCompact
lstrcpy

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE