f5c2d9f5db6015163d22a2863c5c4ec4_JaffaCakes118 | Triage

Sharing

General

Target

f5c2d9f5db6015163d22a2863c5c4ec4_JaffaCakes118
Size

47KB
MD5

f5c2d9f5db6015163d22a2863c5c4ec4
SHA1

4fb43a127917a8e50c2ab52b12ef6910aa0807b3
SHA256

059ecbfe18da91a9586055d45e9ae91d48073fc2aba95ce575ba19a0231c84da
SHA512

da78a67be8a01cfd2af0bd30ec84fa5430752f5567702ff58597181f385adcfffaadef0b814d8fe78495e2b9d5d07e87c87a6e1e0bef1d45b6ae379cb33d211e
SSDEEP

768:XBPBZdHs1703Fn7Fa0oOxTXfZlE8gWGR5Cg8C18EEEEENEEEEEEEEEEZZyO:XBZn6MZZRFXDE8SRkg8u8EEEEENEEEEi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5c2d9f5db6015163d22a2863c5c4ec4_JaffaCakes118

Files

f5c2d9f5db6015163d22a2863c5c4ec4_JaffaCakes118
.exe windows:5 windows x86 arch:x86

ea9cfb33d288d3d167ab1eff37f2b60d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
HeapSetInformation
FindClose
FindFirstFileW
lstrcmpW
FoldStringW
GetCurrentProcessId
GetCommandLineW
MulDiv
GetFullPathNameW
LocalSize
GetLastError
WriteFile
SetLastError
WideCharToMultiByte
SetEndOfFile
LocalReAlloc
GetFileInformationByHandle
HeapAlloc
HeapFree
GetTimeFormatW
GetEnvironmentVariableA
CloseHandle
CreateFileA
lstrcatA
GetWindowsDirectoryA
GetModuleHandleA
GetStartupInfoA

Sections

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 572B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ