5bfca4c51ab468c9fa54bb8861fd92ae_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5bfca4c51ab468c9fa54bb8861fd92ae_JaffaCakes118
Size

137KB
MD5

5bfca4c51ab468c9fa54bb8861fd92ae
SHA1

5a83e7dd0f0092a18322951cbe2ee9f4c493c164
SHA256

6fa01e08b5ca65a5ff1290bd8ee70b4b81219a3c85e620663886d2efa84010bb
SHA512

8cd99d73dbd37cefd69f38e6433ea243bd0204ca7f2e5f68d1c28293633debc2fd529d40047a7a9b61d78ebe2a165d0bea3bcfa606dc15ec54d20185ffc0cab2
SSDEEP

3072:n8HfCWerI6evzxcB5Nm1JiFBMoW4Ha6RifHx9qKu3:0fCWerI6evz+B5I18Fff5ROI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5bfca4c51ab468c9fa54bb8861fd92ae_JaffaCakes118

Files

5bfca4c51ab468c9fa54bb8861fd92ae_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a6fb8b7beb2d5d4ce6ae8d778bed22ba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_exit
__p__fmode
__set_app_type
_except_handler3
_controlfp
memmove
sprintf
malloc
free
memcpy
??3@YAXPAX@Z
__p__commode
??2@YAPAXI@Z

kernel32

CreateThread
WaitForSingleObject
GetCommandLineA
LoadLibraryA
GetProcAddress
GetModuleHandleA
GetStartupInfoA

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 342B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ