5f04e27f4df2bc3894c66cd81baa8da5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5f04e27f4df2bc3894c66cd81baa8da5_JaffaCakes118
Size

328KB
MD5

5f04e27f4df2bc3894c66cd81baa8da5
SHA1

9761859c30873e6f5671862430c9ad0b72736fbc
SHA256

bfdd384d5f2639106d35b9f5644f5b779d9901f70aff8b13b00a60afb435439b
SHA512

3ce3995558bc81b61f4d1197804360c3711e0418c9e6805adeb577ffdb96da6cb664ea3bfc1de150b10a876624f1a2489ccdeaf6ada29bcaa17a0733b4781648
SSDEEP

6144:d6jjgtpqczh35efgOtMFO1aVGRntfCNIX+4aT9orEcASvPS5OWkZyq91oD:EYwczB5eIOtMFOY87G0brnq5O3Zyq9U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f04e27f4df2bc3894c66cd81baa8da5_JaffaCakes118

Files

5f04e27f4df2bc3894c66cd81baa8da5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

381b7efe74f4f9b0dd95d5522651e330

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ResumeThread
GetLastError
ExitProcess
GetModuleHandleA
GetCommandLineA
GetTempPathA
VirtualLock
GetProcAddress
Sleep
VirtualAlloc

advapi32

CryptGenKey
CryptAcquireContextA

ole32

CoUninitialize

msvfw32

DrawDibTime

winmm

midiInClose

Sections

.text
Size: 4KB - Virtual size: 980B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 580B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 554KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 208KB - Virtual size: 207KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ