5fc4629b31d8d2b6bfbb0489f72f3b2e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5fc4629b31d8d2b6bfbb0489f72f3b2e_JaffaCakes118
Size

1.3MB
MD5

5fc4629b31d8d2b6bfbb0489f72f3b2e
SHA1

3e88cfad51cfe08bbdcf492b2bf6aceaeba31262
SHA256

b439e6c0d0714e23c7fba1b5d939aa99d44d307c919e4baee9660a8d76de17d4
SHA512

a376287b2ef86b55a7e6bacc3768eb0ed5173a9fce7621f8b58e327e04dfd6c0dbe602d07f3fcd1433597d0e20381e035b57e3f413a577b2c5025d9d186343ea
SSDEEP

24576:rcXPbDCMdeXiKUPAPY0rsS/b99OcWH96KZM/bCyzEWVOujrCVQSygF:0PKMdeXiiw0rB/1W++JWcuKKSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5fc4629b31d8d2b6bfbb0489f72f3b2e_JaffaCakes118

Files

5fc4629b31d8d2b6bfbb0489f72f3b2e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

06dce73856ab34008f34a5ead8a7cfd3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetModuleHandleA
GetWindowsDirectoryA
GetSystemTimeAsFileTime
GetStartupInfoA
ExitProcess
VirtualAlloc
VirtualQuery
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
HeapValidate
RtlUnwind
GetFileType
GetStdHandle
GetCurrentProcess
DuplicateHandle
SetHandleCount
GetCommandLineA
GetModuleFileNameA
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetConsoleCtrlHandler

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ