5c5ec2a55a2f074ee3b3e54bbd004b45_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c5ec2a55a2f074ee3b3e54bbd004b45_JaffaCakes118
Size

180KB
MD5

5c5ec2a55a2f074ee3b3e54bbd004b45
SHA1

db7185a871611ecd82dccdcff1ea177ca53d68d3
SHA256

dbbb98215a430268a4e64410cdb5efe6a3a197e589e3da23cecc2e0744666738
SHA512

0e69984bacc306d2740cb680a73dd80690c7da91611d5bf6d1f54efbbe2c3cdfc2fd6dec7bc27af3140728b413d5a62ba14d1a1d23aa7a4d7f8104911d2d59d0
SSDEEP

3072:7T8JLbcdpVXyfUVbzf5RVF+I9lJx7LKirSnvSEyb2I7jQtc2vugU9mAU:7T8VodpViMVbL5fsI9DZ5YPUEvugsU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c5ec2a55a2f074ee3b3e54bbd004b45_JaffaCakes118

Files

5c5ec2a55a2f074ee3b3e54bbd004b45_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9b53b9fb1e2cb808a28cf4226ccbac9f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

rpcrt4

NdrComplexArrayFree
UuidCreate

kernel32

FlushInstructionCache
GetModuleFileNameW
DuplicateHandle
FindFirstFileA
EnumResourceNamesW
SetLocaleInfoW
MapViewOfFile
FindResourceExA
UnmapViewOfFile
FindClose

shlwapi

SHGetValueW
PathRemoveFileSpecW
PathAppendW
PathCombineW
PathFileExistsW

shell32

Shell_NotifyIconA

winmm

timeEndPeriod

Sections

.text
Size: 110KB - Virtual size: 109KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 388KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ