5abdf8d636b90b2425b31858def9fb10_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5abdf8d636b90b2425b31858def9fb10_JaffaCakes118
Size

173KB
MD5

5abdf8d636b90b2425b31858def9fb10
SHA1

91d4bf24c4093b020ebadc72a38754c154ac1b34
SHA256

184647f734b199c881abe12f48051cb0569b2f3547e75f0a5e6357d1992589a0
SHA512

0e92ba4396130e89c0ea6450feb5f650c179513ce18d8fe57c7f5e805c7310f12c7eeb433a5df2e8e9fd7d385def085394c254ba305187f7ddf9710f5179fed7
SSDEEP

3072:alC7ovNe4O6RegNEp2qdKYZs3PMkM4u7OQx/fX+szg494FgIKk:UkoFZOX3UXuaQZfX2gV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5abdf8d636b90b2425b31858def9fb10_JaffaCakes118

Files

5abdf8d636b90b2425b31858def9fb10_JaffaCakes118
.exe windows:4 windows x86 arch:x86

26a418ee288685dbaea19993b8d71ef5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

oleacc

LresultFromObject
CreateStdAccessibleObject

user32

GetWindowInfo
MessageBoxW

kernel32

GetTapeStatus
LCMapStringA
ClearCommError
GetModuleHandleA
EnumResourceNamesA
ExitProcess
LCMapStringW
GetCPInfo
ExitProcess
GetProcAddress

Sections

.text
Size: 146KB - Virtual size: 145KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ