5d8f504232f8071b5fbb229e818db52d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5d8f504232f8071b5fbb229e818db52d_JaffaCakes118
Size

399KB
MD5

5d8f504232f8071b5fbb229e818db52d
SHA1

a5aaa46753db0e6b0b8db28e9afe8372708daaaa
SHA256

fc8a9d2f8b9a84760ca715d9efd7432fbb89d3377b4e9520c8ae5ce261780e46
SHA512

2ec70c00fac4d4e20f4017bf5ac5d826c179ea2465724cdb63aeec9f0f6afdb110dccda542e0751ba2dafaca7a0e535f4c09795823fc613a1fe240bde21bfcab
SSDEEP

6144:qAXzqQy1T1fQ6riW/+85bXHTlO6PcbuJg9IXml5eAAGYGf6xxV4n27LPgcHMA4:LzqXTFQ6H+85TTlytI2+4n2fLH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d8f504232f8071b5fbb229e818db52d_JaffaCakes118

Files

5d8f504232f8071b5fbb229e818db52d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

8b62e83cbe6134f51ec2467c4beeab48

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

RaiseException
QueryDepthSList
LZCopy
GetCurrentThreadId
SetThreadPriority
GetCurrentThread
GetThreadPriority
Sleep
WaitForMultipleObjects
TryEnterCriticalSection
OpenEventW
ReleaseMutex
OpenMutexW
CreateMutexW
UnmapViewOfFile
MapViewOfFile
OpenFileMappingW
CreateFileMappingW
ExitProcess

user32

PostMessageA
UpdateWindow
SendMessageA
LoadCursorA
SetCursor

odbc32

SQLGetTypeInfoW

Sections

.text
Size: 256KB - Virtual size: 255KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 772B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 135KB - Virtual size: 455KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ