5f2c0c99cb4317ac57e31614d45706f3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5f2c0c99cb4317ac57e31614d45706f3_JaffaCakes118
Size

148KB
MD5

5f2c0c99cb4317ac57e31614d45706f3
SHA1

37af9d6db84139d61f675405fab0524b3ebafc6c
SHA256

a8563b28616b15a668a4406c25d5d6b8a68eb231f39ffa2d0bdea8a735105349
SHA512

8ac1c50df97dc3051ed7cac94e8a6c64b66f48849bf178008082f584ff846c17bdb59e7e7aa1ac072f03cd5e8c3c85329f5df2c59dad3467f00ec3c79628c88a
SSDEEP

1536:RK7j4IN7lqgqpJOY5OqcRgk6xmN4DDEK0mWe6DKT9Jcoc5jryz6pp1Cce7QbHDyp:RKn4I2OK75kj4XEqWU0jezvR7oE5Cc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f2c0c99cb4317ac57e31614d45706f3_JaffaCakes118

Files

5f2c0c99cb4317ac57e31614d45706f3_JaffaCakes118
.exe windows:1 windows x86 arch:x86

4a42b84dc5ab07504624d5798522870a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
OpenEventA
DeleteFileA
InitializeCriticalSection
CloseHandle
LoadLibraryW
IsBadReadPtr
GetFileTime
CreateThread
GetFileType
GetCommandLineW
GetStdHandle
GetModuleHandleA
GetStartupInfoA
GetVersionExA
TerminateThread

msvcrt

__setusermatherr
atof
_wfindfirst
_mbstrlen
__p__commode
_wmktemp
_mbsncmp
_adjust_fdiv
_acmdln
log10
getchar
_strerror
puts
_wcsncoll
strncpy
__getmainargs
_XcptFilter
_exit
_tell
__p__fmode
memcpy
_setjmp3
feof
_except_handler3
_controlfp
__set_app_type
_safe_fdivr
_initterm
exit

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 137KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ