5baae6c339e96293ab3d9f5e538205d6_JaffaCakes118 | Triage

Sharing

General

Target

5baae6c339e96293ab3d9f5e538205d6_JaffaCakes118
Size

166KB
MD5

5baae6c339e96293ab3d9f5e538205d6
SHA1

334d3515814a0994d82f1360d551a52f83307726
SHA256

1600cdfc2408b69a75a6993a41d50ad0ac8c4666269785cae0731fe43a855ee5
SHA512

7c520d7a1ea36f57c71a129fa0b3e7b05bd284b4ffb4eb0f4bd6b38bae9ad60effc1dd6044e09b470fac23b305d51190a987ddf95913e0276e656a085a11a8f6
SSDEEP

3072:lJMGXKleIkbS1e32jNbaFkuLtoAl0vSu2l7roH5Ozd2MtKoK+:lBakuJNbamuubvSxl78EU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5baae6c339e96293ab3d9f5e538205d6_JaffaCakes118

Files

5baae6c339e96293ab3d9f5e538205d6_JaffaCakes118
.exe windows:5 windows x86 arch:x86

60490a30aa1626c5d13b2f7f489fcfb5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\Install Path\SendSMS\Main\SubFolder\Includes\InfoApp

Imports

user32

SetWindowPos
MoveWindow
DestroyMenu

kernel32

GetCPInfo
GlobalGetAtomNameA
SetNamedPipeHandleState
EnumResourceTypesA
GetModuleFileNameW
GetLocaleInfoA
GetTempFileNameW
GetLongPathNameW
AddAtomA
GetFileAttributesExA
FindNextFileA
OpenFileMappingA
CreateDirectoryA
GetNumberFormatA
lstrlenW
SetHandleCount
GlobalMemoryStatus

Exports

Exports

?CloseWindowStationCloseWi

Sections

.text
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vars4
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vptr4
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 83KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ