5c8d020162644b1046c759b42d22279c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c8d020162644b1046c759b42d22279c_JaffaCakes118
Size

332KB
MD5

5c8d020162644b1046c759b42d22279c
SHA1

b414471a87b168e1e8dcdd63feaa835e9908bd2b
SHA256

1305bfd5c5a2a778f2e9115fb866acab52cdf5e073a8e059d17488edff7116be
SHA512

3794d53238aefdf0bc15817a59fd18547a7daa1471c87aa92976e0d4175e945629fd7993854d75c56ce001e114eb614a9572d192f65db0ffe7b4a3eaa028a515
SSDEEP

6144:mCANxpsM92nPTs33TxvIzFINLD8c5hvDqd4vqLkaZqrkPwv5dDeU1S:mCwMQ33TxvIZI95hv9CLkaZqlkU1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c8d020162644b1046c759b42d22279c_JaffaCakes118

Files

5c8d020162644b1046c759b42d22279c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3cf4ec3eeea1a4a8964bf79b6f3ccbf9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateThread
GetLastError
TlsSetValue
CloseHandle
VirtualFree
GetModuleHandleA
CreateFileA
TlsAlloc
VirtualAlloc
GetFileSize
GetProcAddress

user32

UpdateWindow
IsZoomed
CloseWindow

netapi32

NetDfsRemoveFtRoot

avifil32

AVISaveOptions
AVISaveOptionsFree

Sections

.text
Size: 4KB - Virtual size: 1014B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 92KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 227KB - Virtual size: 683KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xvda
Size: 512B - Virtual size: 336B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE