5ef93f024fe68833c177e91b514b5517_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ef93f024fe68833c177e91b514b5517_JaffaCakes118
Size

60KB
MD5

5ef93f024fe68833c177e91b514b5517
SHA1

95768735190d7127e16c5cc0479f63cdbbe9d1f3
SHA256

fc3a2dc5944644e1d64d553c52dd5d984ec96e255058918c541514ad2f8262c4
SHA512

677017de3610dfd448dee6c18a06036a27d21155ac3c6f9290a04a01fc140d90a76fc9c3e686fe702a7f774b365f8a79d4774c976522a626fe19566dac45d241
SSDEEP

768:jl2qxcLETP2be6euS1OcnvTYQvnoXLW5o6jEi7iJPOfWQjrQFKB/i0VwJiYR:EqKLs4sOcnvkQvnsW+iyPOOQ3E2MiY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ef93f024fe68833c177e91b514b5517_JaffaCakes118

Files

5ef93f024fe68833c177e91b514b5517_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8ecb9135e39951ec33199bb1e08ad806

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDriveTypeW
CloseHandle
FindResourceExW
GetCurrentProcess
QueryDosDeviceW
ResumeThread
FreeResource
CancelWaitableTimer
GlobalAddAtomW
LoadLibraryA
LockResource
GetLastError
MulDiv
GetTickCount
WriteFile
SetThreadPriority
GetCurrentThreadId
GetVersion
MultiByteToWideChar
LoadLibraryW
FreeLibrary
GetProcAddress
InterlockedDecrement
SetEvent
GetModuleHandleW
GlobalDeleteAtom
FindNextChangeNotification
FindFirstChangeNotificationW
FindResourceW
GlobalFree
FindNextFileW
ReadFile

gdi32

DPtoLP
CreateCompatibleBitmap
GetObjectW
CreatePen
CreateFontIndirectW
LineTo
CreateCompatibleDC
GetMapMode
SetMapMode
SetDIBits

Sections

.text
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE