5a0777b67d9541da5d00dd35aa655fe8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a0777b67d9541da5d00dd35aa655fe8_JaffaCakes118
Size

52KB
MD5

5a0777b67d9541da5d00dd35aa655fe8
SHA1

59a2ad106f6e2d3bea44346249d86e5bb0d1574b
SHA256

1a0af4ebf509d5c75796b14e08ea66934be899c07d3687d84475903d36d8fff3
SHA512

b18df37af5fea2c5ad2b8ad68d289b6f12d536125ad1b803346a22c76b8138b8851f856223cccb0d0bbc18f091fdea60ab78712540c1ea83149ad1b2756a1219
SSDEEP

384:5tc97gsTD1+N/u0yz3lBZkt9K+nyJUVhc:5t26yJXik+nVC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a0777b67d9541da5d00dd35aa655fe8_JaffaCakes118

Files

5a0777b67d9541da5d00dd35aa655fe8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5fef0ea3560698814099369d9b99d922

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
FreeResource
SetEnvironmentVariableW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
TlsGetValue
QueryPerformanceCounter

user32

CreateAcceleratorTableA
DestroyCursor

gdi32

DeleteObject

msvcrt

__p__commode
_exit
_XcptFilter
exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_acmdln
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE