f5ef8278cf7a6c886e2c5d74732e4c0b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5ef8278cf7a6c886e2c5d74732e4c0b_JaffaCakes118
Size

190KB
MD5

f5ef8278cf7a6c886e2c5d74732e4c0b
SHA1

bd150a94036b855846bfb3113ad8e1a6108bc7a2
SHA256

adcacd252d26cf71946fcf7594e106b4ba377a5311e07535821acfd5d51aeee0
SHA512

0038cba3a8505398b546c0ab242990d49103dffb04d9dc05a7b154b3d834a70987899a1b3e080fd471deb59b983e6937de0a44ddb9604fe97884d61e9014c583
SSDEEP

3072:OueTOrJKa2t8b0BCZbaltJFNI9rqGxERwZYsPkKTWejvRhYeBh7E5r2t5oawINn4:OJTOFZ2t8b0IZbAtJFNI4GdYsPkKtLRZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5ef8278cf7a6c886e2c5d74732e4c0b_JaffaCakes118

Files

f5ef8278cf7a6c886e2c5d74732e4c0b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b748000712168053b8d635443db260b9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AreFileApisANSI
GetProcessHeap
GetLongPathNameA
GetVolumeInformationA
GetConsoleDisplayMode
CreateJobObjectA
ChangeTimerQueueTimer
ReadConsoleOutputW
CopyFileW
GetSystemTimeAsFileTime
GetFileAttributesA
PeekConsoleInputW
SetTapePosition
CallNamedPipeA

user32

DestroyMenu
CheckMenuItem
DestroyCursor
RegisterTasklist
IsClipboardFormatAvailable
GetDoubleClickTime

Sections

.text
Size: 9KB - Virtual size: 811KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 177KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pack32
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ