5cc050d52f52b4feae027e9de9899d03_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5cc050d52f52b4feae027e9de9899d03_JaffaCakes118
Size

192KB
MD5

5cc050d52f52b4feae027e9de9899d03
SHA1

6b4a9422dedc28bca97a3f23dc6246a0701c39ce
SHA256

77e2b1b2d7d9bd13b71de698128b530faeffba24dc2eb9240b1e6a835e24daff
SHA512

09c715ad28599149a271b9221c7c5c0f15227d16e48a37cca4ae375dab6c90755d4b36a31622974a43bccdf4f00d5e0e401ab4b2dd5cbbc4da89ec51a12dd80f
SSDEEP

3072:DQailr5fTG1mSUgza09D8EC1FaDsY6I0rISAuqaXxXEwT9sfPWG7eVDraAfsyciK:DUT4DoEeY6XrzAuqaXxXEtPsN8k2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5cc050d52f52b4feae027e9de9899d03_JaffaCakes118

Files

5cc050d52f52b4feae027e9de9899d03_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7c90f8d9faafd0adef2078a8a5be1ef8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAllocEx
GlobalAlloc
GlobalLock
GetSystemDefaultLCID
SetInformationJobObject
GetUserDefaultLCID
GlobalFree

tapi32

lineSendUserUserInfo

dsound

DirectSoundFullDuplexCreate

Sections

.data
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 344B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 66KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE