5e03a535c8bef1ab056074d68ce7a5e0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5e03a535c8bef1ab056074d68ce7a5e0_JaffaCakes118
Size

281KB
MD5

5e03a535c8bef1ab056074d68ce7a5e0
SHA1

689974ae94df135e21f5711c06b5dc72da3f9128
SHA256

3ef8651ccfefcf02386591f26f733b48df7c180e02f8e9d9ff8ca14bfd2cc702
SHA512

c6104e1e695ef13d6d4383253ea29a581a7fb277cba7df27dc4546b97a615c5c4e096dd64176b64b4d89605393bec598029b01f4bc5f6a5eddcb5e1656f99ad7
SSDEEP

6144:h6+tVlwuXUPH4G7wzPe/Mm8hn0YMt73E8gFMyJ6Ltj4k+S:h6+tTbX+YPPe/vkQ3gFMyJ6hjES

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e03a535c8bef1ab056074d68ce7a5e0_JaffaCakes118

Files

5e03a535c8bef1ab056074d68ce7a5e0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3c81eca45eb7a6b225ef89e682e35723

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

gdi32

UnrealizeObject

version

VerQueryValueA

ole32

CreateStreamOnHGlobal

comctl32

_TrackMouseEvent

shell32

ShellExecuteA

Sections

.text
Size: 270KB - Virtual size: 900KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE