5a95e46e6f9c488994ca334da1c17e0f_JaffaCakes118 | Triage

Sharing

General

Target

5a95e46e6f9c488994ca334da1c17e0f_JaffaCakes118
Size

117KB
MD5

5a95e46e6f9c488994ca334da1c17e0f
SHA1

e0994c0da3a928abaf69919bb4c04e881033e6f1
SHA256

00c06605b2cae177436254c5995379c37ace4ffa04d47aad2cc08ceb82ea3ab7
SHA512

98b4921746b03b25f0c07a82c5f5d18ead41f727d438dc119fd26b84861c22ec52610fdb25174f4d9021dec1abdadad10d5f8d9a46f05cf9c58d7d9ecf0a2ddd
SSDEEP

1536:dXBecppuDX2vKF3xkaEvGZ7G7ejmE1u7aP8DnzYVGelfTPXEyySuLaqizyE7AAbF:3/2jFiUljE7aP8DnDeRcsAa/yE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a95e46e6f9c488994ca334da1c17e0f_JaffaCakes118

Files

5a95e46e6f9c488994ca334da1c17e0f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c2aa61b713b19fca33be5a6686b79bcb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
lstrcpyA
HeapAlloc
GetProcessHeap
GetModuleHandleA
ExitProcess
GetProcAddress
LoadLibraryA

user32

GetWindowTextLengthA
GetSystemMetrics
GetLastActivePopup
BringWindowToTop
ShowWindowAsync
GetParent
GetWindow
LoadStringA
CopyImage
SetParent
TileWindows

shlwapi

StrDupA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 614B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ