5c23a1fb5ca139c2d41cbee2f2d94b11_JaffaCakes118 | Triage

Sharing

General

Target

5c23a1fb5ca139c2d41cbee2f2d94b11_JaffaCakes118
Size

1.1MB
MD5

5c23a1fb5ca139c2d41cbee2f2d94b11
SHA1

c7c8df464038e60deebae697bceb276b824ef977
SHA256

5b21486d0a05c075f3931a6d02b8c2ddc22d41fa70cbb0a9259986ef44a3fd7f
SHA512

358146e94299f1dae8e1429e67129aaf35bd61fb4d631adecdb88e609f74ddf2575d1b4b6a2bbae0d5b8a0eff87480d63e55ba9d5e4810a40d5cf572736edd53
SSDEEP

24576:8qM/183ffiGJxCvrJGz5gE4qJUJ279tclhFYUpx6yP2LAMg4iaDKKDB:8qMW3XdsYz2RqYlIm8y+rPDh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c23a1fb5ca139c2d41cbee2f2d94b11_JaffaCakes118

Files

5c23a1fb5ca139c2d41cbee2f2d94b11_JaffaCakes118
.exe windows:5 windows x86 arch:x86

89a04a80a826ce3613f923da912f7197

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

RemoveDirectoryA
SetFilePointer
GetTickCount
GetCurrentThreadId
GetSystemTimeAsFileTime
VirtualFree
VirtualAlloc
RaiseException
QueryPerformanceCounter
LoadLibraryA
GetProcAddress
GetWindowsDirectoryA
VirtualQuery
GetCurrentProcess
GetCurrentProcessId
WriteConsoleA
GetTempPathA

ole32

CLSIDFromProgID
CreateStreamOnHGlobal
OleRun
OleFlushClipboard
CoInitializeEx

msvcrt

_iob
tan
_exit
__setusermatherr

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 730KB - Virtual size: 729KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 394KB - Virtual size: 850KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ