53d4f5a9ae10baa8a9c4b6c3af7028c9_JaffaCakes118 | Triage

Sharing

General

Target

53d4f5a9ae10baa8a9c4b6c3af7028c9_JaffaCakes118
Size

83KB
MD5

53d4f5a9ae10baa8a9c4b6c3af7028c9
SHA1

c2f165cf76825c9a1e477a8cffb8e2ea591d8ffd
SHA256

9ddf0496495515523e57bb588f3e0307203d5ad042be3339a763bc324813eb6b
SHA512

dc2f57d0991492b5871428e797f86a0690a36d52eb973c0a42d9bcca81b2e0460943023b16b73408e499bb2a2ccb050ee8f409df2d54f07da98da62b1caf790e
SSDEEP

1536:sPorrTr1VEUZNqo9UzYQPJZlQZxBQWhh9pjVrs2ryrd1vUQuqHGm:sPonHtjMB5QJQWh9Hs2qlG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
53d4f5a9ae10baa8a9c4b6c3af7028c9_JaffaCakes118

Files

53d4f5a9ae10baa8a9c4b6c3af7028c9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

320ed89602ae4d0f776fcc7a6c25a169

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessInternalWSecure
SetThreadContext
Process32First
lstrlenA
GetComputerNameA
NlsGetCacheUpdateCount
LoadResource
GetConsoleScreenBufferInfo
OutputDebugStringW
FindFirstVolumeA
ReadDirectoryChangesW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE