5a5f931dcb46eeab98909b11eee2c8eb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a5f931dcb46eeab98909b11eee2c8eb_JaffaCakes118
Size

760KB
MD5

5a5f931dcb46eeab98909b11eee2c8eb
SHA1

c81bc407addd467ccb679d2e4a6790c0ba42eddc
SHA256

924c204dfbcb127180766f899c1857e7f2d5bf45fc422554aed8f0bf0f29507b
SHA512

8fc225198de4f3b217fe7dd5a374043d3e18c1be8835161a35804ff1e75b4c586da6adc5f838129635dd053a69029879b0701e478e425d3858836bd744f42339
SSDEEP

12288:mrzaT+vbYhB+UqWHIgLP3Azb92T3eX8GOHICbvuC8y+q7tiZIXLWyYbZbRvyhsdE:mCCvYBv7Mf92TuMdHZzuC8jytiyHA7y3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a5f931dcb46eeab98909b11eee2c8eb_JaffaCakes118

Files

5a5f931dcb46eeab98909b11eee2c8eb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b15de66230ef79b9b3facda6874287a5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
FindResourceA
SizeofResource
LoadResource
CreateFileA
LockResource
WriteFile
CloseHandle
GetProcessHeap
ExitProcess
HeapAlloc
HeapFree
IsBadReadPtr
GetEnvironmentVariableA
GetModuleFileNameA
WaitForSingleObject
CreateProcessA
GetStartupInfoA

user32

wsprintfA
MessageBoxA

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 744KB - Virtual size: 740KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE