5a2c4d264c8d8d7612c3c62f617349c5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a2c4d264c8d8d7612c3c62f617349c5_JaffaCakes118
Size

205KB
MD5

5a2c4d264c8d8d7612c3c62f617349c5
SHA1

de5cf13361f6d4d231fb449117402df6089a24cb
SHA256

bcaae81cbcdc6df740ab1f4ef7c7fe3f2bd4619726dc0640b1088fde8c01945e
SHA512

078c4a87b46475b93486d378d7dff0e68788c91fbc7d800d95dd35a0bdf3d467520be2ff04e476ebda0c5e58581782a387724c6f3bad05d7f242cbb15d051ee3
SSDEEP

6144:de3E4TJ+85GtsScuj/2XjdoxhtCL59ri1:MbTJ+cBu/2TG7tsXi1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a2c4d264c8d8d7612c3c62f617349c5_JaffaCakes118

Files

5a2c4d264c8d8d7612c3c62f617349c5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f133878525ee05aa08477a712e19eb58

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

GetHGlobalFromILockBytes
CoTaskMemFree
StringFromGUID2

imm32

ImmAssociateContext

kernel32

SetProcessPriorityBoost
CreateFileW
WriteFile
InterlockedDecrement
CreateProcessW
TerminateThread
ReadFile
EnumResourceTypesA
GlobalAlloc
Sleep
GlobalLock
GetModuleFileNameW
DeleteCriticalSection
GetStdHandle
CreateEventW
GlobalUnlock

Sections

.text
Size: 129KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 652B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ