5ef4198171d31f25c1dca58a33274824_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ef4198171d31f25c1dca58a33274824_JaffaCakes118
Size

517KB
MD5

5ef4198171d31f25c1dca58a33274824
SHA1

9604ddc6b8a03d3f9369df9f0643e0e3d040c55b
SHA256

93239d2c81e6723168048f510a63c6285a574f963028ea28fafe4323f1540c4e
SHA512

2f92e04850404e4580f9326015e98e44c60a42df33398ec362afac8f8d681cd0ad4332428157db40153f1c091c47361057848bd2674b27b59cef8c77460e178b
SSDEEP

12288:evDzPHR2q2sRfckDoNunwVZVHPyZXCFEWj6lbVCZIj:uHoqhR0kDoQwfYZXCxmllj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ef4198171d31f25c1dca58a33274824_JaffaCakes118

Files

5ef4198171d31f25c1dca58a33274824_JaffaCakes118
.exe windows:1 windows x86 arch:x86

57f7996dc8b70c2baac7bc7628ee3034

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CompareFileTime
GetDiskFreeSpaceA
GetExitCodeProcess
GetFileSize
GetLastError
GetModuleHandleA
GetProcAddress
GetTickCount
LoadLibraryA
SearchPathA
UnmapViewOfFile
VirtualAlloc
VirtualFree
lstrcatA
lstrcmpA
lstrlenA

gdi32

CreateBrushIndirect
CreateFontIndirectA
DeleteObject
GetDeviceCaps
SetBkColor
SetTextColor

user32

AppendMenuA
EndDialog
EqualRect
FindWindowExA
GetMenu
GetMessagePos
InvalidateRect
IsCharUpperA
LoadCursorA
PostQuitMessage
ScreenToClient
SetCaretPos
TrackPopupMenuEx

Sections

.data
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspr
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ