5d5ccd935e73524c61f3d644961acfc3_JaffaCakes118 | Triage

Sharing

General

Target

5d5ccd935e73524c61f3d644961acfc3_JaffaCakes118
Size

65KB
MD5

5d5ccd935e73524c61f3d644961acfc3
SHA1

c8cf0ae913a8c21788868a385b5e10bb3a10e253
SHA256

0806b1143ac753748c48b1019fb99e1c933054fd4b29cd0687d8bdd496ec424a
SHA512

9248d6009243fcb6e73ceeed8bdb9ad32c7e0bb111f2f28922c8776e3cf4c95925a4017439a0418767e9aed32bd52d1653700ebeb34173943b5572f0cae04d1b
SSDEEP

1536:Olg5Z30GflOvfkdXXXXXXXXXXXXXSR4jX:T5eUIv+XXXXXXXXXXXXXSI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d5ccd935e73524c61f3d644961acfc3_JaffaCakes118

Files

5d5ccd935e73524c61f3d644961acfc3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7edff7772967b27cbee1b1bf882137f7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualQuery
GetPriorityClass
DeleteAtom
GlobalFree
LoadLibraryExW
GetCurrentThreadId
GetStdHandle
lstrlenW
CreateFileA
FindResourceA
SetEnvironmentVariableA
CreateMutexA
TlsGetValue
GetExitCodeProcess
ReleaseMutex
GlobalUnlock
GetModuleHandleA
SetLastError
CloseHandle
HeapCreate

user32

GetDC
GetDlgItem
FillRect
GetIconInfo
SetFocus
DispatchMessageA
CallWindowProcA
IsWindow
DrawEdge
DrawMenuBar
CreateMenu
CreateWindowExA
CheckRadioButton

ntshrui

GetLocalPathFromNetResourceA
SetFolderPermissionsForSharing
IsPathSharedA
IsPathSharedW
GetNetResourceFromLocalPathA

msasn1

ASN1BERDecEoid

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 50KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ