5d076c0fbef81d28a9a52c04873f9f4f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5d076c0fbef81d28a9a52c04873f9f4f_JaffaCakes118
Size

32KB
MD5

5d076c0fbef81d28a9a52c04873f9f4f
SHA1

fdfe83f4bb2e26dc828ce1738e70721f23c4e029
SHA256

9ba328bd10f891e49d44185ac2d8396e58410e1b6ca3bdc0fd0c56f9c84abdd4
SHA512

a4c55da9dc232a7a4eea48c17bc41643a3b0e462adc91a11a04bc1844d950017b2cd3aca91563a99c4811f8fc746585a422f3b394d51633ebfcc8a24cb52da37
SSDEEP

768:WEu2KCcfBeu27gbQuVcxzYgyInyg6S2+tUr0NXPRDo2eY:Zu2G50+HwLj2+q0N/lo2e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d076c0fbef81d28a9a52c04873f9f4f_JaffaCakes118

Files

5d076c0fbef81d28a9a52c04873f9f4f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

172a6440b3152d86a4392d15946c54ff

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

winver.pdb

Imports

kernel32

GetTimeFormatW
GetDateFormatW
FileTimeToSystemTime
FileTimeToLocalFileTime
GetModuleHandleW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter

user32

LoadStringW

shell32

ShellAboutW

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xwpcgpg
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE