5cd5dff43193c50710ea492b34af19e1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5cd5dff43193c50710ea492b34af19e1_JaffaCakes118
Size

104KB
MD5

5cd5dff43193c50710ea492b34af19e1
SHA1

e1800cf5f429fe1845f982a1d70fd24115307092
SHA256

fea8386ada6412845cf15ab9de95f32b4da37a40109a06ebd86ed135916b55f4
SHA512

630d78a202b4d7ec7b0f8671daa35382333bd80facf073a963907d529c98863bace8539e27191f38164e2d064009c21bb34f622af59ed0c390b20cb5b5b8e0f3
SSDEEP

3072:gSGoGCeoWcy3jFC/y6hkyUNwVxw65SY0HpUPr:gRCeoWL3hiANC5SY0HpUPr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5cd5dff43193c50710ea492b34af19e1_JaffaCakes118

Files

5cd5dff43193c50710ea492b34af19e1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

459fe0261286ef00e1d8ced67d826714

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
GetLastError
FlushFileBuffers
SetFilePointer
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
CloseHandle

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ