5b0f981938fc6ead58cad4272dcb746c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b0f981938fc6ead58cad4272dcb746c_JaffaCakes118
Size

17KB
MD5

5b0f981938fc6ead58cad4272dcb746c
SHA1

24dc7426334157a29d71c1ea8d911ab7b0044576
SHA256

5f94da64dcd99c57cf7c9eb078a300298d78004b93274bac47c8d58a796181d0
SHA512

04ce5d093439281e2a7ec7bb81719d3aaf5abecd9c7fa9fc479194586bc78b6c12f50626696d0d363c91d507300b8d5ec90220ff3dc912495f2ceadb4d7c3221
SSDEEP

384:nxLs+WDtmbujBZeB0Y9S/HVpSoVjwwHOGg1jy5:nWRmgBAB0jSujwwHOGmjy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b0f981938fc6ead58cad4272dcb746c_JaffaCakes118

Files

5b0f981938fc6ead58cad4272dcb746c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b05b8db19c8a30707df6f7c58aa1f958

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

LookupPrivilegeDisplayNameA

kernel32

CreateMutexA
ExitThread
GetProcessHeaps
TlsAlloc
VirtualAlloc
VirtualFree

ole32

CoDisconnectObject
CoGetClassObject
CoInitialize
CoTaskMemRealloc
OleFlushClipboard
RegisterDragDrop

user32

ChangeMenuA
CopyImage
CopyRect
CreateAcceleratorTableA
CreateCursor
CreateIcon
CreateMenu
DeleteMenu
DispatchMessageA
DragObject
IsWindow

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 50B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 884B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ