5f58336f3196d63aa0980d3567c878ba_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5f58336f3196d63aa0980d3567c878ba_JaffaCakes118
Size

63KB
MD5

5f58336f3196d63aa0980d3567c878ba
SHA1

6f27a74529fc57c29f5090ce12d6289380f185c9
SHA256

fb9ce4c4d2e1eeace8db410e43ac47528549dfb60b881abedee7e43f18216a4e
SHA512

a558142a96951a870901e65ff88717b3b087ee677568f2daaeb7c80188cc508ffa4f4347b96eb1653cbb05c11a9628e250f97cb33a74fe241796b0c6370fd865
SSDEEP

1536:8DEsCKK7gNrKatiz4lHDDeLSzKNq0yZBIIvOHd9K:8DmK4844lWLSzIkBIJ98

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f58336f3196d63aa0980d3567c878ba_JaffaCakes118

Files

5f58336f3196d63aa0980d3567c878ba_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2d522fecc02799e22ca35f6666b9d5cd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeConsole
SetLocaleInfoW
VerifyVersionInfoA
LoadModule
EnumResourceNamesA
QueryDosDeviceA
GetUserDefaultLCID
GetNumberFormatA
GetDefaultCommConfigA
GenerateConsoleCtrlEvent
FindFirstVolumeMountPointA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE