5ed2a51b21e7587f2f3ddb82b09fe037_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ed2a51b21e7587f2f3ddb82b09fe037_JaffaCakes118
Size

128KB
MD5

5ed2a51b21e7587f2f3ddb82b09fe037
SHA1

78a0cf3c66353cd2cc08999cb62ddba6e09f6212
SHA256

da97cedbe2f11aec596656184fac2cc9804d34da182268e89803266a6b38f125
SHA512

54c27c7240c466cfb64357f7051c2b297063929b014182f27d5305502f8c6a0bcbd2c1be47c245b3e8cc07c92ac05ce7364bbb4f3f53577b8cf050bcde099189
SSDEEP

1536:NGoW+XG32XFLvVRUROxHWFc6H577hk1J7hFcIINgVVyqtd4zjsunqLy4:NGobXCMF0Uxsc6Hjk1lchNgryq4n3nF4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ed2a51b21e7587f2f3ddb82b09fe037_JaffaCakes118

Files

5ed2a51b21e7587f2f3ddb82b09fe037_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bc5b8814d162ef685058343329946846

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileType
CompareStringA
LoadLibraryA
LocalFree
GetProcAddress
GetVersion
LocalAlloc

user32

TranslateMessage
DispatchMessageA
CharNextA
CharPrevA
GetMessageA

advapi32

RegCloseKey

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 109KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ