ab5cb938fe9822e7063ec4ef8e414307_JaffaCakes118 | Triage

Sharing

General

Target

ab5cb938fe9822e7063ec4ef8e414307_JaffaCakes118
Size

803KB
MD5

ab5cb938fe9822e7063ec4ef8e414307
SHA1

c5d0c2dcaf55fee665656db0c7ca6d1537669a8b
SHA256

5833f518431c1d95c67774c91878b5a4de124bbcec4c66b7b950feea84736ae6
SHA512

982598276992f1c8c305882ea35389f3a330b3af1b95a726f702f3751857ed00f3e60a9b8533d9072d17efabaaeb61e55a6a25ae3dd9826ad1353df1d4b98799
SSDEEP

24576:SD2Mg0q0Lp2v14ClXm6c6vqtb2gG60UlY:SD2Mg05Lgv2WXm2vMyHB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab5cb938fe9822e7063ec4ef8e414307_JaffaCakes118

Files

ab5cb938fe9822e7063ec4ef8e414307_JaffaCakes118
.exe windows:5 windows x86 arch:x86

9171a46f2e308de37b2c1df6c9ab4041

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
GlobalAlloc
HeapFree
HeapAlloc
CreateFileA
ExitProcess

shell32

SHEmptyRecycleBinA

secur32

CompleteAuthToken

powrprof

GetPwrCapabilities

Exports

Exports

antiemu30

Sections

.text
Size: 773KB - Virtual size: 773KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.oiu
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bdsh
Size: - Virtual size: 5.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 57B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ