5cb0cbc50da887234eb4c65c51fcb1a7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5cb0cbc50da887234eb4c65c51fcb1a7_JaffaCakes118
Size

286KB
MD5

5cb0cbc50da887234eb4c65c51fcb1a7
SHA1

0359249d1f3fffcb331ca58ba18a021a8b331c2e
SHA256

638fee0f52e18974be4fcda34948d480a928581004eb79726958313393d92dd7
SHA512

30ca9e3728c69956d5eb35c27c7e33a24f26978f4e2452415220feeb62cf6493312a692eef67f7af41b3a85cd7786a8d46f49d5645a90d74715ad78c1512c5c6
SSDEEP

6144:MB9QyN+47da5ahxM1Kx+uvgkF7wrlbsL+4bTb2z:WTdaQhxM1KDRZwrlQbTG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5cb0cbc50da887234eb4c65c51fcb1a7_JaffaCakes118

Files

5cb0cbc50da887234eb4c65c51fcb1a7_JaffaCakes118
.exe windows:5 windows x86 arch:x86

1100b8a30a9f5ce28a1c755b33ff2e09

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocalTime
CloseHandle
GetLastError
WriteFile
GetVersion
CreateFileA
FindAtomA
GetTempPathA
lstrcatA
lstrcpynA
lstrlenA
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
GetSystemTime
GetTickCount
WaitForSingleObject
CreateProcessA
lstrcpyA
GetTempFileNameA
lstrcmpA
ExitProcess
RtlUnwind
VirtualQuery
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent

user32

wsprintfA
GetFocus
EqualRect
InflateRect
ClientToScreen
IsWindowVisible
GetCaretPos
GetWindowRect
GetCursorPos

shlwapi

SHGetValueA

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 272KB - Virtual size: 272KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE