d5947cd66ccac1b15cdf059492bc2bcf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d5947cd66ccac1b15cdf059492bc2bcf_JaffaCakes118
Size

61KB
MD5

d5947cd66ccac1b15cdf059492bc2bcf
SHA1

682b4f84dc8757f623eab0099ce977c1d3c3352f
SHA256

aed66ac506ebc909c2083561f2cd06d3c0f950700bdd3ac9ac68f222319c976a
SHA512

dd7d2f102c54a15f84d6b775b3afbb27c1857a8588603bfb4163fc9be58ea82633773089f5a560adcabbc564e5bff4d6bee539b1d8a541aaa9ac0875a3ed07bc
SSDEEP

1536:ntDeDcEIW7rIJVntW33ziylljHs+sgL0YffX1+LwbZM:UISIJVt8ziylljM+rHfMWM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5947cd66ccac1b15cdf059492bc2bcf_JaffaCakes118

Files

d5947cd66ccac1b15cdf059492bc2bcf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

62ac1d5ac67c98f41c57e58db76e395a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLogicalDrives
SwitchToFiber
RaiseException
QueryDosDeviceA
Module32NextW
GetStartupInfoA
BaseProcessInitPostImport
CopyFileExA
GetSystemInfo
IsBadHugeWritePtr
ShowConsoleCursor
ScrollConsoleScreenBufferA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE