5ac330aa5d904f08dc0a93df92a639b1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ac330aa5d904f08dc0a93df92a639b1_JaffaCakes118
Size

155KB
MD5

5ac330aa5d904f08dc0a93df92a639b1
SHA1

4b7fb5af4c63c5d2278b9a5f64d423e4d95c004b
SHA256

448befa8549ab65603f6d6cd6d171922a57eff613f9b4de0e64a9a7dcf03264f
SHA512

1c4a152cb8c5344d728bc553c0321dfb56c5e240a2ef72ef00f30c5cc95364f652c691c35532efe23967e074eeb2bc19ace7a495a116759497123b52bde65b58
SSDEEP

3072:/NazG2TPJyjJxX2N6EOc36Z0OxfKBOrS6/yTHnygTa8ulJdDCrevd:/NazRPUjGNnFqZ1b/bgTa8ulJdOyvd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ac330aa5d904f08dc0a93df92a639b1_JaffaCakes118

Files

5ac330aa5d904f08dc0a93df92a639b1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6aa13f8d242fd3f56ee74d63bc7f8cdd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

lstrcmpiW
GlobalFree
lstrcpynW
MultiByteToWideChar
DeleteCriticalSection
GlobalAlloc
CheckRemoteDebuggerPresent
lstrcpyA
LockResource
GetCPInfo
EnumResourceTypesW
GetACP
GetLastError
FindClose
lstrcpyW
lstrlenW
WideCharToMultiByte
InitializeCriticalSection
GetTickCount
OutputDebugStringW
GetModuleHandleW

winspool.drv

DocumentPropertiesW

user32

KillTimer
GetMessageW
TranslateMessage
GetAncestor
DispatchMessageW
CharUpperW
PostThreadMessageW
CharNextW
SetTimer
wsprintfW
GetDC
UnregisterClassA

Sections

.text
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 980B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.isete
Size: 1024B - Virtual size: 252KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ