5ef52e20b7100beffe257091c0a23859_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ef52e20b7100beffe257091c0a23859_JaffaCakes118
Size

194KB
MD5

5ef52e20b7100beffe257091c0a23859
SHA1

11268383ac2b0c4a22d5b6274abcbee0680a714d
SHA256

5ca5705bd80e6e5d93c01ae5ef843f95a6ef11b92898a400694fbc95345f1e63
SHA512

8d8b9248f60a4b1426f9a96f184592a74810e60497ece76984074ec3dae085935556f3196a3714d3f8d7d2f84c6faab32af40284525583b416719709a496a48d
SSDEEP

6144:RAGXQzjysUIGnWQWpWuNlyY0/26sY8L9:R5QzjyIGnYNgY0/26b8L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ef52e20b7100beffe257091c0a23859_JaffaCakes118

Files

5ef52e20b7100beffe257091c0a23859_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2def80e33554c9fa7ba605b5986c9ebe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

bind
WSAStartup
listen

kernel32

CreatePipe
TerminateProcess
VirtualProtect

gdi32

SetRelAbs
StretchBlt
SetICMMode
ResetDCW
UpdateColors
SaveDC
TextOutW
SetDIBColorTable

shell32

SHAppBarMessage
StrRChrIA
StrStrIA

Sections

.text
Size: 36KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 139KB - Virtual size: 730KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ