5aa2c578cf68bed6d08ae3ca8852f29d_JaffaCakes118 | Triage

Sharing

General

Target

5aa2c578cf68bed6d08ae3ca8852f29d_JaffaCakes118
Size

107KB
MD5

5aa2c578cf68bed6d08ae3ca8852f29d
SHA1

48c7e755443bed5af2ec66d2768f95e622ca317f
SHA256

6f34db4d25c304454e3846f3d57ecfa13df0f805d0a850f28dd0401820ac43f3
SHA512

a4cfa73365fa79ffae929ecb728e7543dcabb05bfc9617bf536fc105058a7d92821ea5b75bd7f0d9d1f61d6bebe34c2f2f559c6b87d77aebbac7c7f7dc7cc6fa
SSDEEP

1536:zRpihneT2JgLHS1hU71z35vjyySNPN7PKMndLiARao0WwRFtTgklQrvgEklVTmsD:TiVeamZJLKvPKqsqXQTOwlhd2gIZ6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5aa2c578cf68bed6d08ae3ca8852f29d_JaffaCakes118

Files

5aa2c578cf68bed6d08ae3ca8852f29d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

af7fdb9ebf2cb69a553a3b994499fc16

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleWindow
CompareFileTime
CopyFileW
CreateThread
DefineDosDeviceW
EnumResourceTypesW
GetCommConfig
GetDateFormatW

msvcrt

_mbccpy
_mbctombb
_mbsdec
_pctype
_snprintf
_snwprintf

shell32

DragQueryFileAorW
StrStrIA
DuplicateIcon

Sections

.text
Size: 24KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE