5d23e01132dd99f100854e89c032aaca_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5d23e01132dd99f100854e89c032aaca_JaffaCakes118
Size

100KB
MD5

5d23e01132dd99f100854e89c032aaca
SHA1

9ae1f37f0772ace649f03a93eb8b8408079bb604
SHA256

f0f89d8a49e1a9804f8367310f0098805165d17528dd9fad0edef4ca1e02f7e4
SHA512

042442276d5df99ae908741993425a581ed681c5c4b9b0e8e177eee0b3d992b87a25341ccd23361c71958f6e895d984826079487c8a54e230df5ad223af829d6
SSDEEP

3072:hmtFgSP961cYdNuWgvk8gnhtTGjDMGgQ8:agEXiNuW0k8UP1v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d23e01132dd99f100854e89c032aaca_JaffaCakes118

Files

5d23e01132dd99f100854e89c032aaca_JaffaCakes118
.exe windows:4 windows x86 arch:x86

07fe452fa0698fe784c5501c18d6879a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetVolumeMountPointA
lstrlen
VirtualAlloc
GetVolumePathNamesForVolumeNameA
GetVolumeNameForVolumeMountPointA
DeleteVolumeMountPointA
FindVolumeClose
DefineDosDeviceA

dhcpsapi

DhcpEnumServers

user32

CloseWindow
ShowScrollBar
DestroyWindow

d3d9

Direct3DCreate9

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 33KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE