5c9cc5e40e2b94d345de07b206543826_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c9cc5e40e2b94d345de07b206543826_JaffaCakes118
Size

396KB
MD5

5c9cc5e40e2b94d345de07b206543826
SHA1

548c87b3478c20c37bf3d25b8040e12020c0cd39
SHA256

00e7b1da988f5b3c922ce000f5ee6f34b6667477274ee01098e36d75a5bf72c0
SHA512

90edf26b30a0284d89f9bd40084a624bb4e125564977e296213399ed2edbf018eafe51662aa5b6869b8ce8eec217171e29e339add2bfa85e4a0d52db39727b74
SSDEEP

12288:5KujG3gOi0/bR7vBHOT+02OoYg07TR+iU2:k/gD017BNOp3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c9cc5e40e2b94d345de07b206543826_JaffaCakes118

Files

5c9cc5e40e2b94d345de07b206543826_JaffaCakes118
.exe windows:4 windows x86 arch:x86

154e1d4063c42b87758fd7d2077e0d1b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetProcAddress
VirtualAlloc
GetModuleHandleA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
GetStringTypeW

user32

GetDesktopWindow
EnableWindow
LoadIconA
LoadCursorA

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 252KB - Virtual size: 252KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 503KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ