5fd159e523729e97d3881304ed8a35fa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5fd159e523729e97d3881304ed8a35fa_JaffaCakes118
Size

62KB
MD5

5fd159e523729e97d3881304ed8a35fa
SHA1

864a4cc892f9184111ea6b32b3a24cdc7b82a119
SHA256

c4f8d8445c75eb4ba3539b5546638281113f4a0a83c2a8a43ea929a6a2b2d4cb
SHA512

9b31f6266c49ea3e879564f71fd57b4c0f1f18afccaa8b3bd443aa899dbadd5f8251c0be1ce7fc944088099d37c7bea66b8bae4c2b8756ba6c1d79fd37c25aa7
SSDEEP

768:Pnwe64KFHpYvI3ax6zjawjFRwPo+ApVXIic0Pw+sekkOnMzP8dpk5tKtFg9sajeU:GL+VMaMgJtFg9sI54LlrllG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5fd159e523729e97d3881304ed8a35fa_JaffaCakes118

Files

5fd159e523729e97d3881304ed8a35fa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

927cfea05a002722a11a866631a61335

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
RemoveDirectoryA
PeekNamedPipe
GetUserDefaultLangID
SwitchToThread
BaseProcessInitPostImport
GetDevicePowerState
ReadConsoleInputW
GetConsoleAliasA
GetPrivateProfileStructA
ConvertFiberToThread

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE