b5f6469c8299a6c818a3ce2b67fc1626_JaffaCakes118 | Triage

Sharing

General

Target

b5f6469c8299a6c818a3ce2b67fc1626_JaffaCakes118
Size

31KB
MD5

b5f6469c8299a6c818a3ce2b67fc1626
SHA1

7cf28372dcc07b37eb3af416d3abc3b43afb84fa
SHA256

4b3ad2b1e36f64b31db6722b36e6d6f0354c60667f4684175f3b37e0303d6052
SHA512

54f5184f4d115281d790833272be31e7c5298611314665a446716acdc05df2af4e640d14b9ac6e3e08336612a6eaae01aae24a95151a0d3a8500ef5b8f6b9fcd
SSDEEP

768:FP5ikSbnsjxWhTQ5rV493SGaOWE/gfWIOkCS:zjxWe4zr1KWI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5f6469c8299a6c818a3ce2b67fc1626_JaffaCakes118

Files

b5f6469c8299a6c818a3ce2b67fc1626_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b77e435961c58f3ecab01545f695d405

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTime
GetConsoleAliasesLengthA
CreateProcessInternalA
ReadConsoleInputExA
Thread32First
GetUserDefaultLangID
SetPriorityClass
BindIoCompletionCallback
GetCompressedFileSizeW
FreeLibraryAndExitThread
CompareStringA
GetCurrentDirectoryW
DuplicateHandle
FindFirstFileA
CreateMailslotA
GetModuleFileNameW
MulDiv
SetFileApisToANSI
DnsHostnameToComputerNameW
InterlockedExchange
MultiByteToWideChar
WritePrivateProfileStructA
OpenFileMappingA
GetCurrentConsoleFont
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.text
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ