5a960699cf909c4fa62d61fa2b31864c_JaffaCakes118 | Triage

Sharing

General

Target

5a960699cf909c4fa62d61fa2b31864c_JaffaCakes118
Size

168KB
MD5

5a960699cf909c4fa62d61fa2b31864c
SHA1

5e97fa91df9190a276fe351ae49125b38e6fd5b9
SHA256

906bc66f6302c462af3dd20fbcb9c5ef51470dce200b7c4afe29ba6617f8dab3
SHA512

df39024427ad2ed7dd0b1a2164a8110578b8e832ea97af1c98bed25468a7a7237f24e0126b362795a8f98ccfa4830ef98ada3aa73f7ba287999afbfee7c359d1
SSDEEP

3072:GdqbHmGaz1i0RVZn5FGxIcJUHqn3Dmb+f1q47tNNOCgw757fYg2WqnJC:GOH4E0RR4xD1r7f5B2LJC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a960699cf909c4fa62d61fa2b31864c_JaffaCakes118

Files

5a960699cf909c4fa62d61fa2b31864c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9b5e7b676203a9207f5950a60a9f3d4a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

ExcludeUpdateRgn
ValidateRgn
ReleaseCapture
GetCapture
SetCapture
ValidateRect
RealGetWindowClassA
InvalidateRgn
GetUpdateRgn

kernel32

GetNextVDMCommand
SetEnvironmentVariableW
FindClose
SetCurrentDirectoryW
GetStringTypeW
FileTimeToSystemTime
SetThreadPriority
FreeLibrary
LoadResource
FindNextFileW
FindFirstFileW
CompareStringA
EnumResourceNamesW
FileTimeToLocalFileTime
RegisterWaitForSingleObject
SetErrorMode
SystemTimeToFileTime
GetShortPathNameW
LocalFileTimeToFileTime
FindResourceW
GetLocalTime
SearchPathW

Sections

.text
Size: 106KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imul
Size: 1024B - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ