5f5e753be0b9d0f528af43f9bc6f7a9a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5f5e753be0b9d0f528af43f9bc6f7a9a_JaffaCakes118
Size

58KB
MD5

5f5e753be0b9d0f528af43f9bc6f7a9a
SHA1

4f50186446ff55bf4b5efbb67e9c330596e77d72
SHA256

883d752b212341e04adeac0b0c5dc9785a69ca426751974d6c86010a13caf86d
SHA512

08a2c21f13bca5edc684480e3e4eb8883a937e288de50e11cf306dff8d2153ae9c741872f947e9162cda994acdbe7647ee08be401c0f8bc5154fa8e370e0bd41
SSDEEP

1536:dy915ADfxpl0xEyfM43RO8/d41uzLTVqOO8RMjb:8915ADh0RMARn/douz/0Ucb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f5e753be0b9d0f528af43f9bc6f7a9a_JaffaCakes118

Files

5f5e753be0b9d0f528af43f9bc6f7a9a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

53673db857c74fc44437a20f110316d0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetFocus
FillRect
EqualRect
EndDeferWindowPos

kernel32

LoadLibraryW
FatalAppExitA
ExitProcess
EnterCriticalSection

advapi32

RegOpenKeyExA
RegQueryValueExA

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 794B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 870B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ