5f515c9acbdba500c50a6a9eec999d8b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5f515c9acbdba500c50a6a9eec999d8b_JaffaCakes118
Size

19KB
MD5

5f515c9acbdba500c50a6a9eec999d8b
SHA1

26876d3c1de95f968a19fe5c408cba8b525f0269
SHA256

816c3d5077962b808c324632d73dca81209603451912a20724140eb477e16a08
SHA512

22b03134d1a99cd49dc6ca3f686219a08ab925b26c3793871b2b9fb9c3d2752cd4c3341cfb55b5fb763608b476b8a3c5351b294565b3201be33f7bd5e0e1b864
SSDEEP

384:fXMJUZ2demW8WKS9h3ss++l8Njo30wCjkfxoO5dqIVit:f/MdyDRcs+mnS7qit

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f515c9acbdba500c50a6a9eec999d8b_JaffaCakes118

Files

5f515c9acbdba500c50a6a9eec999d8b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fed951abde77cda0b5de3d5ba34663e6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow

kernel32

LoadLibraryA
VirtualAlloc

version

VerLanguageNameW

comdlg32

GetFileTitleW

ws2_32

WSAGetLastError

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE