5a4d4fd803279e474d73c2d6d4fa6a10_JaffaCakes118 | Triage

Sharing

General

Target

5a4d4fd803279e474d73c2d6d4fa6a10_JaffaCakes118
Size

328KB
MD5

5a4d4fd803279e474d73c2d6d4fa6a10
SHA1

73d97dca7edb7655072816f049f3a4e5fe8239b1
SHA256

5a5e803cc629c215fe97cf4b0a7ef0155768d65fa65705d55848eea2ebce8d75
SHA512

9b75f4db4839105b7b654dcc1aafaa4d3966971306be739041e7d1a95106d31b6cd088d5c27be97a140e3b16458c75a0301fe5d345ee4b2e99ca3c5858e920a9
SSDEEP

6144:qchym+ed6FTyWbPxrA0X/EPiwy5dsKnpCE4vxgkfLaN+uQMin09:aRg2THbJEPGWKn/JGLuN7i09

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a4d4fd803279e474d73c2d6d4fa6a10_JaffaCakes118

Files

5a4d4fd803279e474d73c2d6d4fa6a10_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b5cb147a043775fa995dbb94670cd866

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocalTime
GetLastError
GetModuleHandleA
VirtualProtectEx
GetTempPathA
GetProcAddress

advapi32

ConvertSidToStringSidW

avifil32

CreateEditableStream

winmm

midiInClose

Sections

.text
Size: 88KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 148KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 428KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ