5bbcb51290a43677f189a9a8cb41e2a3_JaffaCakes118 | Triage

Sharing

General

Target

5bbcb51290a43677f189a9a8cb41e2a3_JaffaCakes118
Size

815KB
MD5

5bbcb51290a43677f189a9a8cb41e2a3
SHA1

c3fa84af9dd880c09e222aca38ad5fb606653407
SHA256

7c842b936ef6b338c4c7f1fc57fb55e7847535e5a65ee9ea94d2cdd29c08c688
SHA512

b1fa7ea3358810c771640e16010ca40f3d4f26c49f5240965c85386a8d6709ebb8788252330c68bf360be268eb72bc8a7bb467dc4b39a24ba49da128218f3c8b
SSDEEP

12288:AbHsMdTyOaFwa6cvSshLsEZ8XGpyJC/qpsuFT3iyXCe+a3KK3xIEqjn8:ysvf+a6cX2X2CrT3i2C/a3HxXWn8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5bbcb51290a43677f189a9a8cb41e2a3_JaffaCakes118

Files

5bbcb51290a43677f189a9a8cb41e2a3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

86cf398e9ce3d7b0ae569acb72c93a79

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyW
GetComputerNameA
GetStringTypeA
LoadLibraryA
GetCurrentProcess
GetCalendarInfoW
GetPrivateProfileIntW
GetTickCount
FoldStringW
HeapCreate
GetFileSize
EnterCriticalSection
SetCurrentDirectoryA
SetVolumeLabelW
DeleteFileA
GetConsoleTitleA
GetConsoleCP
LeaveCriticalSection
SetEnvironmentVariableA

adsldpc

FreeADsStr
AllocADsStr
ADSIGetNextRow
AllocADsMem

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 803KB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ