5d04bf523ff01be87b3b180b144a22c0_JaffaCakes118 | Triage

Sharing

General

Target

5d04bf523ff01be87b3b180b144a22c0_JaffaCakes118
Size

26KB
MD5

5d04bf523ff01be87b3b180b144a22c0
SHA1

e32aea96ae7b404364f72326b2ab571b8bac8479
SHA256

d4d4a66fb1d29723dfad1dfa8df3429749d64afc5046533de2671c6470188138
SHA512

4c074e442a0df2e86f8ff79d11070e438e0cbe3baac2b61ece6b02b58c8ebc27df8747c7861e7595cbc2c376f3106c089cdf48b0f326d7b6bdebf5a02cfb0448
SSDEEP

192:SW5jrYeWFcSzJrQXsDRgHH112mZBdZDB+DEYUPTFXkRyOqIqmyy3OnB7numoZ2Zg:t9+9HTmljD1TWHyy+BrumoZqZ69r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d04bf523ff01be87b3b180b144a22c0_JaffaCakes118

Files

5d04bf523ff01be87b3b180b144a22c0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

02f528341f3c3c182adc8504bf164536

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mops32

?Copy@@YAHHPAPAD@Z

kernel32

HeapCreate
GetStringTypeW
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
VirtualFree
HeapFree
RtlUnwind
WriteFile
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

XOR
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE