5deecfd6282eaefe46d45c9a44a07c0c_JaffaCakes118 | Triage

Sharing

General

Target

5deecfd6282eaefe46d45c9a44a07c0c_JaffaCakes118
Size

194KB
MD5

5deecfd6282eaefe46d45c9a44a07c0c
SHA1

f1d9b0e16d03968de42b20b9e9dc4782e24470ba
SHA256

5f70077c81e870d7cac33280e8b28f45c157923755865e75aa23c538f92d9602
SHA512

01526789648471d8016bf1db02101d7a83f07ea94338adb1fb2be8857acbd15a1000cf8b90e08028366bddcf679bbe740370cd95bdcd829fe34d0c1574faa77f
SSDEEP

3072:Ouunz+5x0K4qI5lOcN8WuBf0e/SZBQ8T4wRXjtZmL0S5AJ7lYo9oVfOqpeTs:Huz+3mpZVuBDSZyXw7VJmYo54

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5deecfd6282eaefe46d45c9a44a07c0c_JaffaCakes118

Files

5deecfd6282eaefe46d45c9a44a07c0c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8c6eade60b08f07345d5d5a138416098

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetProcessWorkingSetSize
GetSystemTimeAsFileTime
GetEnvironmentVariableA
RaiseException
SetUnhandledExceptionFilter
GetCurrentProcess
GetCurrentThreadId
lstrlenW
lstrlenA
TerminateProcess
LocalAlloc
IsDebuggerPresent
EnumResourceTypesA
WideCharToMultiByte
GetACP
GetLocaleInfoA
SetHandleCount
UnhandledExceptionFilter
InterlockedExchange
CreateProcessA
GetCurrentProcessId
GetModuleHandleA
MultiByteToWideChar
GetTickCount
GetThreadLocale

ole32

GetHGlobalFromILockBytes
ProgIDFromCLSID
CoTaskMemFree
StringFromCLSID

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 252KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ