5a592978587f4179cf6bc7a6d5c06473_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a592978587f4179cf6bc7a6d5c06473_JaffaCakes118
Size

22KB
MD5

5a592978587f4179cf6bc7a6d5c06473
SHA1

9ab28f87e03cb39d623de5610241d708d3269086
SHA256

ea23b6722bcab8dcb06d41c4659b6b3859687dce40e5e0503995eb424d77bd0f
SHA512

d322faa5344f2f6c18959b13ef218d70401c959937b472daa710a218da8a9e48c8eeb1d9e7d30fb5cbb0fe68d3d8453d309b283c9920d14e509746b363102318
SSDEEP

384:48APVLEQFdKxjE0NzIQi5Up6GNkpJMpXqAl+FejXTbNy5hReLi:XAPVLEQsYKzI+YmpXqubXTbN6Rt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a592978587f4179cf6bc7a6d5c06473_JaffaCakes118

Files

5a592978587f4179cf6bc7a6d5c06473_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d3a008f4f08a505723cdb1f0aaf0d3a8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteProcessMemory
VirtualAllocEx
GetProcAddress
LoadLibraryA
VirtualProtectEx
GetThreadContext
CreateProcessA
GetCommandLineA
SetThreadContext
ReadProcessMemory
ResumeThread

user32

GetDC

gdi32

SetTextColor
GetTextColor

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE