5add4b91079b3f9f802a287dec9d53bb_JaffaCakes118 | Triage

Sharing

General

Target

5add4b91079b3f9f802a287dec9d53bb_JaffaCakes118
Size

17KB
MD5

5add4b91079b3f9f802a287dec9d53bb
SHA1

7773e9769dc0b279ca97e78dbf5ac8ddc8665f61
SHA256

54eb41d4693c1888431924c6c09063b7fedc655b59d19e476cd28b59e99b05d7
SHA512

37e9b8761bbc17f839d472eada149cdb4419000dd6581d9ac4f2b8de108837d5d5c00706076842f450ddf5f828fe60edc053d0d993c646e6065b19c067daab36
SSDEEP

192:JyCXk74J1i9enzud0rNknhwsTqAyhzciNVuOtK+4T6R19mLo/8OcGbZw2+fYpU:wCXkyhuk2GC5yO+VP4U4LXBqw2+fYp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5add4b91079b3f9f802a287dec9d53bb_JaffaCakes118

Files

5add4b91079b3f9f802a287dec9d53bb_JaffaCakes118
.exe windows:5 windows x86 arch:x86

6c92ec1699de4dc6a9595f6d12f69234

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
HeapAlloc
HeapCreate
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
RtlUnwind
VirtualQuery
TerminateProcess
IsDebuggerPresent

user32

FindWindowW
LoadIconA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ