5da3271ef38028107fe081f197f4009a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5da3271ef38028107fe081f197f4009a_JaffaCakes118
Size

155KB
MD5

5da3271ef38028107fe081f197f4009a
SHA1

689d333b4293f770a03889bdabba3c3eb4a8ee7f
SHA256

95a98b2468303c8136f1706f168cd346c6d25d68495d782396acaee44dfd6c8e
SHA512

93ba49105b1ffc1b8d4f4b82db4e3dfac2d2eb9e93c2596b71ee20905e9081e85a7c56a67509b6f2362675c120b5ff9a6a3a08a2dd64890e2a209422477b6742
SSDEEP

3072:AUDz6MuFFGTFemI8vonyaXUgn4hwqwp/LRmI9cCjfDUvaymff+Ec7dp:hz2FGpeU7yp4h/e0IDLUCymX+7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5da3271ef38028107fe081f197f4009a_JaffaCakes118

Files

5da3271ef38028107fe081f197f4009a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

509942e0c3e08c13079a22c8f6e527bf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

PostThreadMessageW
TranslateMessage
CharNextW
DispatchMessageW
GetMessageW
GetDC
SetTimer
KillTimer
SendMessageW
wsprintfW
CharUpperW
UnregisterClassA

kernel32

FindClose
lstrcpyW
GlobalAlloc
DeleteCriticalSection
lstrcpyA
CheckRemoteDebuggerPresent
WideCharToMultiByte
GetTickCount
OutputDebugStringW
EnumResourceTypesA
lstrcpyW
LockResource
GetACP
lstrcmpiW
lstrlenW
InitializeCriticalSection
GetCPInfo
GetLastError
MultiByteToWideChar
GlobalFree
GetModuleHandleW

oleacc

LresultFromObject
CreateStdAccessibleObject

Sections

.text
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1012B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.isete
Size: 1024B - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ