5a1d788395e3db775147192750065492_JaffaCakes118 | Triage

Sharing

General

Target

5a1d788395e3db775147192750065492_JaffaCakes118
Size

404KB
MD5

5a1d788395e3db775147192750065492
SHA1

b05f26b5b82ce27a53bb5167cc99282ba2b243b5
SHA256

7d90b6d1ac57047ba2a81beb967a7726bce1b4caaa87a0e4d36d47e4b830a382
SHA512

38420c9c8fed77ee36a8a8516396d82d050887d1d745e0a26637a53aa8094ede161e18c88daac63998d1c641defb462b70acda4183183113dae5fbb8d882df0a
SSDEEP

6144:akIaEUaD6ZJvYVQ9o/zUihBRyDcr/hWwX7E1fmdJGw:iUaDCwKcLhvyQ/hWwsfmJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a1d788395e3db775147192750065492_JaffaCakes118

Files

5a1d788395e3db775147192750065492_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e40d483b007fcc6dd0f24c4f7c7fa029

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadWritePtr
DeleteCriticalSection
CreateSemaphoreA
VirtualAlloc
IsBadCodePtr
Sleep
GetModuleHandleA
FlushFileBuffers
GetProcAddress

user32

LoadBitmapA

ole32

CoInitialize

netapi32

NetDfsManagerInitialize

avifil32

AVISaveOptionsFree
AVIPutFileOnClipboard

msvfw32

DrawDibOpen

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 658B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 300KB - Virtual size: 699KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ