5c469ceef479cafdf7a5cb9e3f5edad6_JaffaCakes118 | Triage

Sharing

General

Target

5c469ceef479cafdf7a5cb9e3f5edad6_JaffaCakes118
Size

10KB
MD5

5c469ceef479cafdf7a5cb9e3f5edad6
SHA1

79d2e26afd1298107964f0d5446f885a6afe20e1
SHA256

2fdbb67a4c0b0f70a61193c2d8123ce403deb0c664f684c17847a30346d961ea
SHA512

117c39059609cf3ec53102d2c23d668ed3eda37684393748558b422ec437ad41d5a35cf546d814ac99949db61030f77403d29f9b7c488b77954e43feb21cafbc
SSDEEP

96:7QkBH6CNV11GpRTJTaZ/3rEnyecfTT+lLLf5zmBirlFTx:7QSnSlYInSTKl3f5KBir7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c469ceef479cafdf7a5cb9e3f5edad6_JaffaCakes118

Files

5c469ceef479cafdf7a5cb9e3f5edad6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

88a9be0a7e30698bf96a0073cb84b8e6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenMutexA
CreateMutexA
ExitProcess
GetComputerNameA
GetCurrentProcess
GetCurrentThread
GetEnvironmentVariableA
GetExitCodeProcess
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetShortPathNameA
GetThreadContext
GetVersionExA
GetVolumeInformationA
CloseHandle
SetFileAttributesA
SetPriorityClass
SetThreadPriority
VirtualAlloc
VirtualAllocEx
VirtualFree
lstrcatA
lstrcpyA
lstrlenA

shell32

ShellExecuteExA
SHChangeNotify

wininet

InternetGetConnectedState

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE