5754c24a5c4301c1322c986b940a6f9b_JaffaCakes118 | Triage

Sharing

General

Target

5754c24a5c4301c1322c986b940a6f9b_JaffaCakes118
Size

56KB
MD5

5754c24a5c4301c1322c986b940a6f9b
SHA1

2a0e3ac37f19873ddddd89c4dc41f6b93081e252
SHA256

61d2a1c669faf0b64369827127bfa5bf1707a79791328f0dd288b7609441210f
SHA512

abd9889461f50593c793e305ec400178d8557e7d679d884fcbf009ad6641f1c664141a5755dd7b48593a3898c1f65340d24c552f2542e0c52f212bf0b6919cd9
SSDEEP

1536:Ee71XedLGmVFMvkF2q4Yu1GeQXM41ybCfOQkpdCJ8lfRj:91XekmVI8mGeiDsCfOn2ylfR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5754c24a5c4301c1322c986b940a6f9b_JaffaCakes118

Files

5754c24a5c4301c1322c986b940a6f9b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b43f7c0d6d365f122d61299860742ca5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDiskFreeSpaceW
ExpungeConsoleCommandHistoryW
GetExitCodeThread
GetNumaNodeProcessorMask
CreateWaitableTimerW
ReadConsoleOutputCharacterA
GetDateFormatW
GetCalendarInfoA
GetConsoleFontInfo
UTRegister

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE