5e33eca7297ca2eca0fb6df67b4024dc_JaffaCakes118 | Triage

Sharing

General

Target

5e33eca7297ca2eca0fb6df67b4024dc_JaffaCakes118
Size

23KB
MD5

5e33eca7297ca2eca0fb6df67b4024dc
SHA1

a8a91779db26df85c809f6b04bd728b8c9ef75aa
SHA256

57c606cd328c52192a231794c3cfc9d7e5bf5f12f5c9adf92e42f03be476e875
SHA512

66546bdbb2b4096fef76b666771a8687d06b429c4ef93fb29c20b72263a6d70257f739c1cda232148969c71b1f2644651eb1355edb384f2cbe32ccc7d8b94f6e
SSDEEP

384:bQ6X1c1soZFtZCOm8erQFZOctyW4csAS/rMXCbC4M4BF:bjq1Tb7EPQuuyJcsDbC+BF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e33eca7297ca2eca0fb6df67b4024dc_JaffaCakes118

Files

5e33eca7297ca2eca0fb6df67b4024dc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b7a01c71edc3f428af7f232e1f01b637

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
CreateFileA
GetFileSize
SetFilePointer
MoveFileExA
FreeLibrary
HeapAlloc
HeapFree
GetProcessHeap
Sleep
CreateProcessA
ReadFile
GetSystemDirectoryA
lstrcatA
GetShortPathNameA
CreateDirectoryA
GetStartupInfoA
FindFirstFileA
GetLastError
lstrcmpiA
GetProcAddress
GetTempFileNameA
LoadLibraryA
GetModuleFileNameA
CreateMutexA
CloseHandle
GetFileInformationByHandle
GetTempPathA
DeleteFileA

user32

wsprintfA

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE