f5f3a67534c03dbc1a4b2539894d627e_JaffaCakes118 | Triage

Sharing

General

Target

f5f3a67534c03dbc1a4b2539894d627e_JaffaCakes118
Size

83KB
MD5

f5f3a67534c03dbc1a4b2539894d627e
SHA1

bc5b0f02c7f8603d999648056823bacf3b330ace
SHA256

b804d59457c6cdb2b1077e62aefe8f306962b128dd29d5aa2e458ef9849a2263
SHA512

052ea3d3a830966338954bf9eab3347d36510771567595064d0506b0b7ecea0265c07d344e58d34f963485156ad9e0eb867b38b1d2ef4ad3e6f6e475fb539b1f
SSDEEP

1536:DMJsL8GyvKU/bnC01DoahAeZgHUSqQHVXYnU6i+I7W4jEErxTWDTMqhGKYIZTETr:DMJsL8pvjbV1kahHMHJYUwcjBkMqhGKy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5f3a67534c03dbc1a4b2539894d627e_JaffaCakes118

Files

f5f3a67534c03dbc1a4b2539894d627e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5aaf9364e1942f24aaffe53f57a23a1b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleTextAttribute
lstrcpynW
GetPrivateProfileSectionW
DuplicateConsoleHandle
SetConsoleCtrlHandler
EnumLanguageGroupLocalesA
FindActCtxSectionGuid
WriteConsoleOutputCharacterA
ReleaseActCtx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE