5fa54d54897e481b58847fb335ef6759_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5fa54d54897e481b58847fb335ef6759_JaffaCakes118
Size

67KB
MD5

5fa54d54897e481b58847fb335ef6759
SHA1

efe73defc60b290122ea3957b38348a0a04dadc7
SHA256

303b2c3202ab5645e7a722dc966510e8ef2e8e844c16a17c884f371b0900a270
SHA512

27f238f4628bd00830a4f15d172a73b9e22fd7aac90c70e1786c0530ee4fe085cdda70492cdc1d16fca9cfe8edbc5afdbcca17c34f4f6abeb094cef1cd27e9c9
SSDEEP

1536:/unoJ+Mn8f5KHM1dZlJIVRmNwPi8CKlRAU/z8DwyIK:/GpLEOL4UQ1CKlRAU/z8DwyIK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5fa54d54897e481b58847fb335ef6759_JaffaCakes118

Files

5fa54d54897e481b58847fb335ef6759_JaffaCakes118
.exe windows:4 windows x86 arch:x86

eec7db26f3b1e5c8d7ef1445c65c2043

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemPowerStatus
SetConsoleCursor
EnumDateFormatsA
SetMessageWaitingIndicator
CreateTimerQueue
CommConfigDialogA
GetConsoleAliasesLengthW
AddAtomA
OpenThread
GetEnvironmentVariableA
GetCommandLineW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 52KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE