5b18940eb607c41f4ac807c555e52409_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b18940eb607c41f4ac807c555e52409_JaffaCakes118
Size

26KB
MD5

5b18940eb607c41f4ac807c555e52409
SHA1

0e4af1e574ccec902a23711213ac62d64f18a81f
SHA256

8476face816a3a41eee6e82a1f28b3266d93866a700962b5cbeccce1ffac4539
SHA512

4386048ea1a0ef1291abcb85fd0ee5545b19fde1c35f04c6e762e3ab60dce99b02cacbd50943fbf711d4d3855e612b6aa5f1076251b1017a58398a14acdd81d2
SSDEEP

384:GUu7OO9Xzf5yNMNeLNek+vDfcuDuODE/ysbyI/976jbwDxnr01QXPyynGG:GP7OO+Oo/y3/gXpj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b18940eb607c41f4ac807c555e52409_JaffaCakes118

Files

5b18940eb607c41f4ac807c555e52409_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5d47134d750343c92a4b5f7eb6bf6921

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadReadPtr
LoadLibraryExW
GetStdHandle
IsBadStringPtrA
GetModuleHandleA
VirtualProtect
Heap32First
FreeConsole
lstrlenA
GetLastError
ResetEvent
LocalFree
GetCommandLineA
SetLastError
GetDiskFreeSpaceExA
TlsGetValue
CloseHandle
CancelIo
EnumResourceTypesW
GetConsoleTitleA

user32

CopyImage
IsIconic
CreateMenu
EnableWindow
DialogBoxParamA
GetMessageA
GetKeyState
GetScrollBarInfo
GetUpdateRect
CloseWindow
CreateWindowExA
DragDetect
DispatchMessageA

hlink

HlinkClone
HlinkNavigate
HlinkCreateFromString
HlinkCreateFromData
HlinkOnNavigate

advapi32

RegCloseKey

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ