56569347924350649672283b26218e50_JaffaCakes118 | Triage

Sharing

General

Target

56569347924350649672283b26218e50_JaffaCakes118
Size

63KB
MD5

56569347924350649672283b26218e50
SHA1

a98cb24ade7df93d06190b03186af72b8b7daa40
SHA256

21096e58a3ebb648f20dce61ebda43fc652a8e53fb2df4c320af2e6628b0f29d
SHA512

70df2844874102246c4b8a0fef479dbd1b927fbccfc72da52b630eba115d7a6da3517bfe1608adb0844aaeb338032e514e42c45f02f34de45d8c82bc11a08e4d
SSDEEP

1536:Y2ZfFiL3xUQFRyBGmDOjp71gvqZVzEZMjsrsaX:Y443xUSR6GmDOjF1gBPX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
56569347924350649672283b26218e50_JaffaCakes118

Files

56569347924350649672283b26218e50_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4a7270759f64e60cc637a533605c9299

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempPathW
GetConsoleTitleW
GetNamedPipeHandleStateA
ResumeThread
SleepEx
SetTapeParameters
GetSystemDefaultUILanguage
AddAtomW
BuildCommDCBW
QueryPerformanceFrequency
ReleaseSemaphore

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE