f5f0f59d2e73074201b0e110fd352182_JaffaCakes118 | Triage

Sharing

General

Target

f5f0f59d2e73074201b0e110fd352182_JaffaCakes118
Size

83KB
MD5

f5f0f59d2e73074201b0e110fd352182
SHA1

4a9e7d13b9a69cf725dadf89ee1acb1efd427ed7
SHA256

6176bf8a8c2cd5c08357dd5fb782f049c82a74eae17b2ba8d209f06c136494a9
SHA512

cf7a84d3b7f9bd109dee89a6a69eedda98a32f261c395e4315510de2bd1f9f96c8856364f31ec285bb8491909497dbe88239d85547c381a3e75719f0d6665162
SSDEEP

1536:hf515/dyX9Zm9MjxQoM9JuFI/l0pjVrs2ryrd1vUQuqUfsy:hf5158X9ZL14wFsl0Hs2qV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5f0f59d2e73074201b0e110fd352182_JaffaCakes118

Files

f5f0f59d2e73074201b0e110fd352182_JaffaCakes118
.exe windows:4 windows x86 arch:x86

edf6bce044853a71333d09023f328549

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetAtomNameA
SetComputerNameW
WritePrivateProfileStringA
GetModuleHandleExA
ChangeTimerQueueTimer
GetShortPathNameA
CreateProcessInternalWSecure
GetProcessVersion
SetCurrentDirectoryA
GetExitCodeProcess

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 27KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE