5a7180dda7c69e41f373cefda145896d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a7180dda7c69e41f373cefda145896d_JaffaCakes118
Size

107KB
MD5

5a7180dda7c69e41f373cefda145896d
SHA1

86ddef5b9a21823fec68125e21b4dda37da7f8a0
SHA256

9229893510736ec6c41e170afd1ca1d39f15cdec9ca22d5f1c479e948f37daf0
SHA512

34d3e2f173953f0be6a03101e9a927c6adeb9e65cfb3f227808468c4cebdbe3ccd616a355594fe0f58c140674ae4adbf252f048f701d4d2d8a6896e814ea6faa
SSDEEP

1536:5MhoE7p4FNNDDfZv3tEr1Bssw3LyGEPmQo9owbR5+R4PZ0wDBRBGkbMkKjDkWC2B:542FNpjErsjjD53hLLBGeKjFC6gPEv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a7180dda7c69e41f373cefda145896d_JaffaCakes118

Files

5a7180dda7c69e41f373cefda145896d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4d41e185cc86c384d6b75767f953dc16

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateSemaphoreA
GetVersionExA
GetEnvironmentStringsW
GetCurrentThread
GetPriorityClass
GetTickCount
GetCommandLineA
GetStdHandle
CreateMutexA
GetEnvironmentStrings
CreateEventA
GetCommandLineW
IsDebuggerPresent
GetProcAddress
GetModuleHandleA
GetCurrentProcessId
GetModuleHandleW
GetStartupInfoW

shell32

SHQueryRecycleBinA

rtm

RtmFindNextHop

msvcrt

__p__commode
_onexit
_exit
_XcptFilter
exit
_wcmdln
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__dllonexit
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 99KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ