ede5f539ddec20ad0d7aaacc52e28e27_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ede5f539ddec20ad0d7aaacc52e28e27_JaffaCakes118
Size

240KB
MD5

ede5f539ddec20ad0d7aaacc52e28e27
SHA1

1d3622496f16c28849bdf0299b4833c6ea4c5f72
SHA256

979f361299baca8d24d76cc7007c726bd8ece62bf0e59be7e6806d1dfec784bf
SHA512

682b55d41f1e1c17e2085e4d9a632cfc1e4184b889f9829c384d5dbd5f4e9e1aa0b1a57966e087f964a6340038b43be2403cd78f2773e20412e6f8a11f6f64e0
SSDEEP

6144:L8e8ey/3Q11zz0ajMtEfHe9b7jm26U41UPFSZ:AYy/O1zz0ajMtEYy4EZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ede5f539ddec20ad0d7aaacc52e28e27_JaffaCakes118

Files

ede5f539ddec20ad0d7aaacc52e28e27_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b93774c9c52c54bb0870e3c469f4d4a3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetTextColor

shell32

ShellExecuteExW

kernel32

SetTermsrvAppInstallMode
FindClose
FindFirstFileW
FindFirstFileExA
Sleep
GetFileAttributesExW
CreateThread
GetExitCodeThread
LeaveCriticalSection
EnterCriticalSection
ResumeThread
GetCurrentThreadId
GetSystemTimeAsFileTime

oleaut32

CreateErrorInfo
DispInvoke
VarI1FromDec
VariantInit
SysFreeString

Sections

.text
Size: 116KB - Virtual size: 200KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 708B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 123KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ