5b9a2ee131f53f74de2b5f9d773e3926_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b9a2ee131f53f74de2b5f9d773e3926_JaffaCakes118
Size

9KB
MD5

5b9a2ee131f53f74de2b5f9d773e3926
SHA1

b266346c2bdc18a1699763717d3215aff84a9b0c
SHA256

45b6d873b425145efac57bbddd3e68d13fc9a25ebc9a37149bcac111d34c2ade
SHA512

70f9e31e1a9d4e9d9b0e7f3258bdc3fca7901ac13011374aed59121f527c517e76061c19b12e97f7cc85761b7824b33dc535ac9bbe2b0553ccb8049872cfe0c4
SSDEEP

96:LKe0L4dh2eNLbtcNIWTfh1Gm++yU64NGaRPDFb3RK4LnNxdjK9wae4HUknoabMa:LKeU4dztcN5tog3RRBvNxd+9LecUkoTa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b9a2ee131f53f74de2b5f9d773e3926_JaffaCakes118

Files

5b9a2ee131f53f74de2b5f9d773e3926_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d817a01e74f7c2e5d7c0f98e15825f10

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupIterateCabinetA

kernel32

lstrcpyA
SetUnhandledExceptionFilter
FindFirstFileA
lstrcmpA
FindNextFileA
FindClose
RemoveDirectoryA
GetVersionExA
GetModuleFileNameA
GetTempPathA
CreateFileA
FormatMessageA
GetLastError
ExitProcess
GetFileSize
GetModuleHandleA
CreateFileMappingA
MapViewOfFile
GetTempFileNameA
WriteFile
CloseHandle
UnmapViewOfFile
IsDebuggerPresent
GetFileAttributesA
CreateDirectoryA
lstrcatA
DeleteFileA
GetCommandLineA
CreateProcessA
GetExitCodeProcess
lstrlenA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RtlUnwind

user32

MsgWaitForMultipleObjects
CharNextA
MessageBoxA
PeekMessageA
DispatchMessageA

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ