5e0c3ca029ebbf5d5ea75b0bc4c5f03e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5e0c3ca029ebbf5d5ea75b0bc4c5f03e_JaffaCakes118
Size

58KB
MD5

5e0c3ca029ebbf5d5ea75b0bc4c5f03e
SHA1

a1c2d712c8179f652a064d4a5bfff5765edd4270
SHA256

fa2a79405cea47acc3a43414e2a301c54c0b87be8f08e6a3a1c39850d921dec8
SHA512

88db73c6d39f285dc9132bdf24cd4227ea447905cda84897da9d1321bbd18eddf52bb107f989c303e9d8bd31f010da7d7bbf71ee85e3b89ad37145872d072b11
SSDEEP

1536:T34C/vNhHG6jpJ7mKENYTP6I/ms0lAANNlGA:NvNJG6HaO+gmsBAQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e0c3ca029ebbf5d5ea75b0bc4c5f03e_JaffaCakes118

Files

5e0c3ca029ebbf5d5ea75b0bc4c5f03e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d1752aa5811881ee863bb99a554cf3fd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateMutexA
TlsGetValue
LoadLibraryExW
GetPriorityClass
FindResourceA
GetCurrentThreadId
GetModuleHandleA
GlobalUnlock
lstrlenW
GetStdHandle
CreateFileA
SetEnvironmentVariableA
SetLastError
ReleaseMutex
GetExitCodeProcess
DeleteAtom
VirtualQuery
HeapCreate
GlobalFree

user32

CreateMenu
DispatchMessageA
CheckRadioButton
IsWindow
FillRect
SetFocus
DrawMenuBar
GetDC
CallWindowProcA
GetIconInfo
CreateWindowExA
GetDlgItem
DrawEdge

ntshrui

SetFolderPermissionsForSharing
IsPathSharedW
GetNetResourceFromLocalPathA
GetLocalPathFromNetResourceA
IsPathSharedA

msasn1

ASN1BERDecEoid

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 43KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ