5c03d6327fc6ddf8fd04aa8d57b7e338_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c03d6327fc6ddf8fd04aa8d57b7e338_JaffaCakes118
Size

320KB
MD5

5c03d6327fc6ddf8fd04aa8d57b7e338
SHA1

977637fefe295d9b18802303b7747f2211c59038
SHA256

28436bf33910e8fd4c02cb0c6917c33a11ce3860229e10c12c59332b48e044d8
SHA512

8badf1228de9695b473359a093336937f5777fc503ae2eaa543aa5114fa2864f8e85403605406bf8155ae5def85b82b35388a7818cd518f2260938111f71ea33
SSDEEP

6144:2G9oGfXK4ERMzGo5/h0/BPHLcQb3rVKa/HpS3M:2G9oGfXuBo5/6/FB3RKaQ8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c03d6327fc6ddf8fd04aa8d57b7e338_JaffaCakes118

Files

5c03d6327fc6ddf8fd04aa8d57b7e338_JaffaCakes118
.exe windows:4 windows x86 arch:x86

69ce0e6ab5c0c35c9ce01a9fdf760395

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CompareStringA
CreateIoCompletionPort
CreateThread
GetCurrentThread
GetLocaleInfoA
GetProcessHeap
GlobalAlloc
LoadLibraryA
MapViewOfFile
ReadFile
SetErrorMode
SetFilePointer
Sleep
UnmapViewOfFile
WaitForSingleObject
WriteConsoleA
lstrlenA

user32

GetMenuDefaultItem
InflateRect
IsMenu
RemovePropW
GetDlgItem

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 658B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 305KB - Virtual size: 308KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ