5f86f5971d22e09dd2a43d7bab6d1853_JaffaCakes118 | Triage

Sharing

General

Target

5f86f5971d22e09dd2a43d7bab6d1853_JaffaCakes118
Size

115KB
MD5

5f86f5971d22e09dd2a43d7bab6d1853
SHA1

443bf35adfab49ed6b65965b9735ca7023c90ed8
SHA256

6feee6221d834966daa34cc6d58b86fbb1db747210d77962870911bd59841d03
SHA512

1566dc7f00c2a8c926bd5c6fa44f98840365e0a870df92c7ad3faeb2aa0f1f84b5208d0cabff993600dc6b6484ecd602d60bda8295936242fdee1d6cd62affe7
SSDEEP

3072:xvQGodyQsr/sM3HGK5+Xa9Yd23S9Efly8mJ6gRMjqEm3:ySr/hGK5+XIXIvEm3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f86f5971d22e09dd2a43d7bab6d1853_JaffaCakes118

Files

5f86f5971d22e09dd2a43d7bab6d1853_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1bcb7b7015ff5fb666446095d2f7fff5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
EnumDateFormatsExW
OutputDebugStringW
GetCommandLineA
EnumResourceNamesA
BeginUpdateResourceW
GetOEMCP
EnumUILanguagesA
GetAtomNameA
SetConsoleInputExeNameW
FlushViewOfFile
EnumResourceLanguagesW
CreateHardLinkW
DeleteTimerQueue
BackupRead
SetSystemPowerState
RegisterWowExec
GetConsoleInputExeNameA
GetDefaultCommConfigW
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.text
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE