5ac062e141d815cd3d609e772f3e0b8f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ac062e141d815cd3d609e772f3e0b8f_JaffaCakes118
Size

420KB
MD5

5ac062e141d815cd3d609e772f3e0b8f
SHA1

b6098c317122fce9fc14c028d65ce8e67a18f6d6
SHA256

6b4a88d4951fe9ceb3c9b63c1630c4886b32613888ba90bd911f48fefbb83ecd
SHA512

943bd05de489e3e6ae7880c250d28efa3b4a080adff93c0e80213aabbf34afedf115c81ac421ab13188dcc242170d576e90747ee0641b8de9ffbd6fb2147efde
SSDEEP

12288:76YL3ieJ4YFTx1nhSQce5+yGiBKGVI5QjOSY:3LTeaQQce5/pBl5ib

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ac062e141d815cd3d609e772f3e0b8f_JaffaCakes118

Files

5ac062e141d815cd3d609e772f3e0b8f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

381b7efe74f4f9b0dd95d5522651e330

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ResumeThread
GetLastError
ExitProcess
GetModuleHandleA
GetCommandLineA
GetTempPathA
VirtualLock
GetProcAddress
Sleep
VirtualAlloc

advapi32

CryptGenKey
CryptAcquireContextA

ole32

CoUninitialize

msvfw32

DrawDibTime

winmm

midiInClose

Sections

.text
Size: 4KB - Virtual size: 980B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 580B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 690KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 300KB - Virtual size: 298KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ