5c25a8bca82001d9dc8e00922f771348_JaffaCakes118 | Triage

Sharing

General

Target

5c25a8bca82001d9dc8e00922f771348_JaffaCakes118
Size

188KB
MD5

5c25a8bca82001d9dc8e00922f771348
SHA1

0ad0afc57c98925455edbaea134e562222c28441
SHA256

19c2e3585b2599d36a4abf9d08233f3a693a3bcbdd1c4668324cc6323886c448
SHA512

d6b00dde5c5ceec6a989fb2e70aa794367d4d51bb7cdaeb4b94c342e11c86685bef3cdc6472d0072e8ec6e8db8f889fee5067e7780476f646a8d1d5de8c30213
SSDEEP

3072:7M67aZ6Ia9lX+OiMx8oEfMdJoxlIUADokJWp:7M67apOiMxrWMPVUAD7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c25a8bca82001d9dc8e00922f771348_JaffaCakes118

Files

5c25a8bca82001d9dc8e00922f771348_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e6d2db7e4196b8a7e096fcd8bf6e171d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

wsprintfA
wsprintfW

msvfw32

ICClose
ICOpen
ICSendMessage
ICDecompress

kernel32

GetShortPathNameW
DeleteCriticalSection
GetModuleHandleA
LocalFree
CreateFileA
CloseHandle
SetHandleInformation
GetProcAddress
LoadLibraryA
GetCurrentProcessId
EnumResourceTypesW
SetUnhandledExceptionFilter
InitializeCriticalSection
GetCurrentThreadId
UnhandledExceptionFilter
GetLastError
IsDebuggerPresent
GetVersionExA

ole32

StgCreateDocfile
StgOpenStorage

Sections

.text
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 868B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ