5f5cbdc385c8e85f470451fbb0babcb5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5f5cbdc385c8e85f470451fbb0babcb5_JaffaCakes118
Size

775KB
MD5

5f5cbdc385c8e85f470451fbb0babcb5
SHA1

11814472f26d2ae5c8dabc04a545d00d6b2b582e
SHA256

1230b5a6506ff368ba4e320a4d0609ceb75dcab5fa29b7561072bc97e769df17
SHA512

06bb7f92ff6f7baeab8642dd81701a4adc0fa55fd42b1b2a7c14304b8627c8246e4f67c4127ed23f8bbbb0f076f891421c38efd3eb4912815d697857a8c139be
SSDEEP

24576:0jMdnUotUGgLZz1EuL/tlazyXMT3ieqhrGyBalRMk:0MUr3ZJTjtlaGXMLienRMk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f5cbdc385c8e85f470451fbb0babcb5_JaffaCakes118

Files

5f5cbdc385c8e85f470451fbb0babcb5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

48efe1deefda5f4b4b9bc2fca3c18706

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
GlobalUnlock
ReleaseMutex
GetVersion
GetModuleHandleA
GetCurrentThreadId
TlsGetValue
SetEnvironmentVariableA
lstrlenW
SetLastError
FindResourceA
DeleteAtom
CreateMutexA
GetExitCodeProcess
VirtualQuery
GetStdHandle
GlobalFree
CloseHandle
HeapCreate
LoadLibraryExW

user32

DrawEdge
CheckRadioButton
CreateMenu
CallWindowProcA
CreateWindowExA
GetIconInfo
GetDlgItem
IsWindow
FillRect
DispatchMessageA
GetDC
SetFocus
DrawMenuBar

ntshrui

IsPathSharedW
GetNetResourceFromLocalPathA
SetFolderPermissionsForSharing
GetLocalPathFromNetResourceA
IsPathSharedA

msasn1

ASN1BERDecEoid

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 765KB - Virtual size: 768KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE