545aa5c100687fd9152d9597e19762e8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

545aa5c100687fd9152d9597e19762e8_JaffaCakes118
Size

22KB
MD5

545aa5c100687fd9152d9597e19762e8
SHA1

fd5e563ea63388ac96358861c44e0bb902e7ca76
SHA256

31557c82a8ab97bd7fb406c53a78d4b1844db22f593298c8e75b4d0be9c09cb9
SHA512

7151d6183cafb2d13a5067b15e6f9fb26352e5f7039484d220ab25224e02f7837890d38ce31241eb972c416056ad2a365709f5cedfb901249101011a9a4ca39e
SSDEEP

384:jTmPHKvJfhMd1ZXwC7xtLljDHx8HYQ751j39rqYc4ICbq:jTmPgJGnZXw0FH6/NrACb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
545aa5c100687fd9152d9597e19762e8_JaffaCakes118

Files

545aa5c100687fd9152d9597e19762e8_JaffaCakes118
.exe windows:5 windows x86 arch:x86

d7e37acb9023d4056f0ca8f4277033ac

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleInputWaitHandle
SetEvent
FindFirstVolumeA
GetTempPathA
VirtualAllocEx
CreateNamedPipeA
SetPriorityClass
RequestWakeupLatency
HeapAlloc
SetUserGeoID
HeapReAlloc
QueryDosDeviceA
HeapSize
ExitProcess

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ