5daf62c07ae6250d7b97ff5d2be1a2a9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5daf62c07ae6250d7b97ff5d2be1a2a9_JaffaCakes118
Size

102KB
MD5

5daf62c07ae6250d7b97ff5d2be1a2a9
SHA1

70529ace368906870f53197a98262c20c7e57cb7
SHA256

123b472bcafc41eccc9a5a32f4f74f0438cb5aac75969b09ae9d26f187d6ce54
SHA512

d5505b858d563832aa7a25a595f8e015a9a80af04fa5399fc518457ff8498380b6db3d0a99f05a94d6748df1ca930abb32dad872db8ad9011dfe5e941b7d9ee4
SSDEEP

3072:IWw3KJQR5uGS8TbdDnBLz0o24aB32JTx0rCHnOnG7dl9QtO:8D0o2Jmpx0OHOnObYO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5daf62c07ae6250d7b97ff5d2be1a2a9_JaffaCakes118

Files

5daf62c07ae6250d7b97ff5d2be1a2a9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cd4cb9d929b23d235f4a90892aa860c0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
HeapDestroy
HeapFree
HeapCreate
HeapAlloc
GetProcessHeap
CloseHandle
ReadFile
SetFilePointer
CreateFileA
Sleep
ExitProcess
GetModuleFileNameA
QueryPerformanceCounter
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
IsBadReadPtr
lstrcmpiA
FreeLibrary
HeapReAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 660B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE