b5c12c3c818b81e0b54565dc8aeecbbf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b5c12c3c818b81e0b54565dc8aeecbbf_JaffaCakes118
Size

324KB
MD5

b5c12c3c818b81e0b54565dc8aeecbbf
SHA1

97a60ddc28fdcd7b19da3db78d61c6d27b051149
SHA256

c98555ec0395f25cfdd8d2aafa51724549d07f904231c09c926e7640d7a314d3
SHA512

584e40e7cb914ec6de65ac5421719a6e0e8fb65c69b8469bc577390ec157ee27d9306f0423ebdc7112a9e6dcea0dc79606ba65a2eb4cbe2b110db91ecc948ded
SSDEEP

6144:UYSdOkNbfajpGBZe1tPLkr6zC34NYvpNEeDx5PtWKmZN5:MJLCrTkuzCoN4P5VFmZN5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5c12c3c818b81e0b54565dc8aeecbbf_JaffaCakes118

Files

b5c12c3c818b81e0b54565dc8aeecbbf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

23477d1135f6a79751531effebd13f30

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcessId
CreateDirectoryA
GetCurrentThreadId

shell32

SHGetFileInfoA

Sections

.text
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 257KB - Virtual size: 260KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

duoez5jn
Size: 57KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

1eboexgn
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ