5daaf9d62f79f4b1ddababb61de847f3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5daaf9d62f79f4b1ddababb61de847f3_JaffaCakes118
Size

53KB
MD5

5daaf9d62f79f4b1ddababb61de847f3
SHA1

2fe9e02363223d3368ab220a60a6bfdace2538d8
SHA256

5967a3f2ac9094597755942e03214410666d3ea0587c2cc21700ce30ff1755c5
SHA512

912f07805893938b18fdb6ff84b3d0a8c4625352bd916362dd476c8276f6d0e6b42044a6fd39e2a53e93599fbb455040b4f62a6e0425de9c1454c323f60adb2e
SSDEEP

1536:5bT8v+Sh0jUTdaVUH2fzwBzO0ObClRyVTLuIyAM74Uav:5UvmjYdVWb4kwsu92v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5daaf9d62f79f4b1ddababb61de847f3_JaffaCakes118

Files

5daaf9d62f79f4b1ddababb61de847f3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e55f49b776c18ef6494dabb67a03c819

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateDesktopW
CopyIcon
DrawTextW
FreeDDElParam
EqualRect

comctl32

ImageList_Add
FlatSB_GetScrollPos
CreateToolbar

urlmon

CDLGetLongPathNameW
IsAsyncMoniker
CopyStgMedium
UrlMkGetSessionOption
CoInternetParseUrl

kernel32

SetMailslotInfo
SetFileTime
SetConsoleIcon
SwitchToThread
TlsGetValue
WriteConsoleW

msvcrt

_ftime64
_heapadd
_iob
_ismbcl1
_futime

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 145KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE