5ea920d8e2c1b8c4becdef878dab59e0_JaffaCakes118 | Triage

Sharing

General

Target

5ea920d8e2c1b8c4becdef878dab59e0_JaffaCakes118
Size

28KB
MD5

5ea920d8e2c1b8c4becdef878dab59e0
SHA1

a544e1894d994cb778c8dd964fb0b2acdf33cbc2
SHA256

4dd76f6c9810f4c93dc29c29b552c3b563a9ccdb6c294675397b49087ea19c2b
SHA512

56d3dd0e6e17084a0607fd6049f3b2509e7c35eb36aad315dca7641f3bcc5710a06122ede67ce09046a9c42678061789c994359c9ea15ed7d389a19443a4db51
SSDEEP

768:/+HWvEkj2JjHlP48jTxyc1Q8/ZKn9ruPcsyJsW+CFDOg:OWqHlP48jdB3oycsyjB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ea920d8e2c1b8c4becdef878dab59e0_JaffaCakes118

Files

5ea920d8e2c1b8c4becdef878dab59e0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a12714cf623375e6bbfc2f861f779fb8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
ReadFile
GetFileSize
CloseHandle
CreateFileA
DeleteFileA
SizeofResource
FreeResource
LockResource
LoadResource
FindResourceA
ExitProcess
CreateProcessA
GetEnvironmentVariableA
GetModuleFileNameA
Sleep
GetTempPathA
SetFileTime
GetFileTime
GetWindowsDirectoryA
GetCurrentDirectoryA
SetFileAttributesA
CreateDirectoryA
GetModuleHandleA
GetStartupInfoA

msvcrt

sprintf
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
??3@YAXPAX@Z
??2@YAPAXI@Z

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ